Understanding KMS and Envelope Encryption

Modern applications store highly sensitive data: