Data must be protected both at rest and in transit. At the heart of AWS encryption is KMS (Key Management Service), and data services like S3, Redshift, and Glue integrate with KMS to manage keys. Today we organize key types, encryption setup per service, and client-side encryption.
KMS is a service creating, managing, and controlling encryption keys.