AWS Key Management Service uses hardware security modules to protect the security of keys. This enables to create, delete and control keys that encrypt data stored in AWS databases and products. This key is accessed through AWS Identity & Access Management (IAM) by selecting Encryption keys either/or through the command line or interface.