What is the BYOK-Cloud HSM Approach?

This Bring Your Own Key approach is where encryption and decryption are restricted to the Cloud HSM