Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.