# AWS Key Management Service
<a name="kms-integration"></a>

AWS Key Management Service (AWS KMS) allows you to create and control keys that protect your data. AWS Control Tower optionally allows you to encrypt your data with AWS KMS encryption keys. For information about AWS KMS, see the [https://docs.aws.amazon.com//kms/latest/developerguide/overview.html](https://docs.aws.amazon.com//kms/latest/developerguide/overview.html).

For information about how to set up AWS KMS keys with AWS Control Tower, see [Optionally configure AWS KMS keys](https://docs.aws.amazon.com//controltower/latest/userguide/configure-kms-keys.html).