Which AWS service is used to provide encryption for Amazon EBS?

Explanations:

AWS Certificate Manager is used to manage SSL/TLS certificates and does not provide encryption for EBS volumes.

AWS Systems Manager helps manage and automate tasks across AWS resources but does not specifically provide encryption for EBS.

AWS Key Management Service (KMS) is designed to create and manage cryptographic keys, making it the correct service for encrypting Amazon EBS volumes.

AWS Config is used for resource monitoring and compliance but does not provide encryption for EBS.