Which AWS service can a company use to manage encryption keys in the cloud?

Explanations:

AWS License Manager is used for managing software licenses, not for managing encryption keys.

AWS Certificate Manager (ACM) is focused on managing SSL/TLS certificates for secure communication, not specifically for encryption keys.

AWS CloudHSM is a dedicated hardware security module service that enables customers to manage their own encryption keys in the cloud securely.

AWS Directory Service is used for connecting and managing directory services like Microsoft Active Directory; it does not manage encryption keys.