Classic design · Junior → Staff · by System Design AI

Design a Key Management Service like AWS KMS

Keys that never leave HSMs, envelope encryption with data keys, policies, grants and encryption context, versioned rotation, then cells, regions, quorum-run HSM domains and customer-held keys: three one-hour boards and the theory.