How does Self-Defending KMS work?

The Self-Defending KMS allows you to manage, store, and use your keys and secrets. You can generate keys in Self-Defending KMS or import your own keys. You can use these keys to perform cryptographic operations on your data that you can provide to Self-Defending KMS using the REST APIs, the PKCS#11, KMIP, JCE, Microsoft CAPI, or Microsoft CNG providers, or the command-line client. All requests to Self-Defending KMS are logged and may be reviewed and monitored using the Self-Defending KMS web UI.