KMS · Key Management Service
A KMS manages cryptographic keys. Destroying a key can sanitize data only when the applicable NIST method permits crypto erase and encryption/key generation, key custody and destruction, media coverage, verification, records, and final disposition satisfy the system's policy; encryption alone is not automatic compliance.