Encryption key management is provided using AWS Secrets Manager, with keys kept separate from database dumps.