Is the Attestation Capability of a Key Management Service Really a Customer's Own?

The key is securely released only inside the ranclave. Customers with contrinsic peting, with attatation capability and a confidential key management service like manager cesem, have the assurance that their data is exactly running inside a computer environment that they can trust.