AWS (KMS ) Key Managament Service

We are using Key Management Service to encrypt sensitive data stored in an S3 bucket, you can use KMS to create a key, and then configure the S3 bucket to use that key for encryption. This way, only authorized users with the right permissions can access and decrypt the data.