To protect customer data, Snowflake uses strong AES 256-bit encryption key management rooted in AWS CloudHSM. Here's how we deploy it.