One option
18. AWS KMS
During a design review, the team identifies this need: encrypt data using managed keys. Which AWS service or concept is the most direct fit?