Recommending an AWS KMS or Azure Key Vault integration for Tableau Server extract encryption to satisfy a compliance requirement that all cryptographic keys must be customer-managed and not held by the vendor