A company is using custom models in Amazon Bedrock for a generative AI application. The company wants to use a company managed encryption key to encrypt the model artifacts that the model…

AWS Key Management Service (KMS) provides the functionality to create and control encryption keys (Customer Managed Keys - CMKs) that can be used to encrypt data across various AWS services, including the model artifacts generated by Amazon Bedrock model customization jobs. This ensures data at rest is encrypted with keys managed by the company.

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS, not an encryption key management service.

Amazon Macie is a data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS, not an encryption key management service.

AWS Secrets Manager is used to store and manage secrets such as database credentials, API keys, and other sensitive information, but not to manage encryption keys for service data at rest.