BYOK / HYOK
Bring Your Own Key lets the customer supply the master key to a provider KMS, the provider stores it. Hold Your Own Key keeps the key in customer infrastructure entirely, the provider asks the customer to decrypt. HYOK is the strongest sovereignty posture.