Envelope EncryptionHow the CMK/DEK two-tier key structure in envelope encryption limits key leak impact and simplifies key rotation.EncryptionAes-256Envelope-EncryptionKey-Management