AWS KMS uses Customer Master Keys (CMKs) to encrypt and decrypt data. These keys can be managed directly in the AWS Management Console or programmatically via AWS SDKs. When you integrate AWS KMS with your email marketing platform, you can set it up to automatically encrypt emails, customer data, and other sensitive information before it is stored or transmitted.