[dikei]

KMS is often used to store KEKs only, you'd still have to create and manage DEKs and use AEAD for actual data encryption.

[dogma1138]

Depends these days KMS also extends to solutions that provide full on encryption as a service such as Vault. If your design allows for a trusted and well vetted EAAS solution to be used that should be the first you go for.