KMS Encryption

Key1 (AES-ECB) + Key2 (Vault Transit GCM96)

Guest
G

Key1 Encrypt (AES-256-ECB)

Key1 Decrypt