AWS IAM Identity Center now supports customer-managed KMS keys (CMKs) for encrypting identity data at rest. It’s a key evolution for data sovereignty in the cloud. By Steef-Jan Wiggers.