A financial institution requires compliance with a regulation that mandates the use of validated hardware security modules to encrypt data at rest. Which service should be implemented to satisfy this prerequisite, given the need for FIPS 140-2 validation for key storage?
Object storage service with server-side encryption options
Key Management Service (KMS)
Secrets storage and management service
CloudHSM