Customers can also make use of AWS CloudTrail to audit the KMS key usage to identify potentially malicious behavior or misuse of permissions and access to data. For a deeper dive on AWS encryption ...

AWS recently announced the availability of AWS Key Management Service (AWS KMS) External Key Store (XKS), allowing organizations to store and manage their encryption keys outside the AWS KMS service.