Which AWS service is used to provide encryption for Amazon EBS?

Explanations:

AWS Certificate Manager is used for managing SSL/TLS certificates, not for EBS encryption.

AWS Systems Manager provides operational data from multiple AWS services, but it does not handle EBS encryption.

AWS Key Management Service (KMS) is specifically designed to create and manage cryptographic keys used for encryption, including for Amazon EBS.

AWS Config is a service for assessing and monitoring configurations of AWS resources, not for encryption.