If you're planning on putting sensitive data in the cloud, you'll likely want to use your CSP's cloud Key Management Service, like AWS KMS, Google Cloud Platform KMS, or Microsoft Azure Key Vault. However, the three services are very different in their cryptographic design, and these differences have real consequences for applications, particularly in a multi-cloud context. Our infographic below gives a snapshot of the main features of each one.
More detailed information about the diverse cloud KMS and cloud HSMs offered by the big three providers can be found in our Cloud Cryptography Whitepaper, or you can watch our recent webinar on the subject.
This infographic is correct according to publicly available information at the time of publishing, but is subject to change: the top CSPs are in fierce competition to attract large enterprise users likely to need these facilities, and hence are releasing new features all the time.