Status: IN
DynamoDB supports three encryption key types: AWS owned keys (free, no audit), AWS managed keys (`aws/dynamodb`, auditable via CloudTrail), and customer managed keys (full control over policies, rotation, grants).
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-encryptionhowitworkshtml.md