AWS CloudHSM
#98 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”AWS CloudHSM gives you a hardware security module (HSM) in the cloud under your own control. An HSM is a secure device specially built for creating, storing and using encryption keys. In CloudHSM, the HSMs are connected to your VPC as a cluster. You manage the HSM’s users and keys yourself, and AWS cannot see your keys. In KMS, AWS handles much of the key management, while in CloudHSM more of the control is in your hands.
Simple example
Section titled “Simple example”A safe inside a bank vault that is yours alone, and even the bank doesn’t have its key.
Why it’s needed
Section titled “Why it’s needed”By law, some organizations (such as banks) must keep their keys on separate hardware that only they control.
Where it’s used
Section titled “Where it’s used”Meeting the strict rules of banks and financial institutions, and digital signatures.
Azure equivalent
Section titled “Azure equivalent”Azure Dedicated HSM / Managed HSM
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: