A company needs centralized control of encryption keys used with supported AWS services, including permissions for key use and an audit trail of key-related activity. Which service should it use?

1. AWS Cost Explorer
2. AWS IAM Identity Center
3. AWS Key Management Service
4. Amazon CloudFront