Hi,

Having support for AWS KMS as a key storage would be very beneficial for AWS users. As the only option for AWS HSM currently is the very costly AWS CloudHSM. This would be similar to the work setting up support for google KMS done in an earlier PR.

#286

I'm happy to write up the patch if the work would likely be accepted.

Thanks.