Exam AWS Certified Cloud Practitioner CLF-C02 topic 1 question 418 discussion

It is CloudHSM. The keyword is "encryption keys" as opposed to certificates, which would be AWS Certificate Manager.

CloudHSM enables you to generate, store, and manage encryption keys in a dedicated hardware appliance.

C: AWS cloudHSM

. AWS CloudHSM AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud. With CloudHSM, you can manage your own encryption keys using FIPS 140-2 Level 3 validated HSMs. It also allows you to securely generate, store, and manage cryptographic keys used for data encryption in a way that keys are accessible only by you.