AWS Key Management Service (KMS) has integrated with AWS CloudHSM so you now have the option to create your own KMS custom key store. Each custom key store is backed by an AWS CloudHSM cluster and enables you to generate, store, and use your KMS keys in hardware security modules (HSMs) that you control. The KMS custom key store helps satisfy compliance obligations that would otherwise require the use of on-premises HSMs and supports AWS services and encryption toolkits that are integrated with KMS.