IBM KP added support for two fields in the key context
- CustomSecretData -> to indicate the secretData in Get/Set APIs does not need to be generated by KMS
- PublicSecretData -> to indicate the secretData is only the public key and not the actual private secret
AWS KMS follows the same secret model as IBM KP where the secret provider supports generation of secret data keys.