Which AWS service can a company use to manage encryption keys in the cloud?

AWS CloudHSM provides hardware-based key management to manage and protect encryption keys in the AWS Cloud. It allows customers to generate and use their own encryption keys while complying withrigorous security requirements. WhileAWS Certificate Manager (ACM)manages SSL/TLS certificates, it does not handle encryption keys independently, andAWS License ManagerandAWS Directory Serviceare not designed for managing encryption keys. AWS KMS is also relevant for key management but wasn't listed as an option in this question.