Security, Identity, and Compliance
RecognitionAWS CloudHSM
Dedicated hardware security modules in the customer's VPC with direct customer administration of keys and HSM users.
Key points
- It provides a stronger control boundary but requires cluster, availability, user, backup, and integration operations.
Best-known use cases
- Meet a mandate for dedicated customer-controlled HSMs.
What candidates often confuse it with
- CloudHSM provides dedicated HSM control; KMS provides managed keys and broad service integration.
Key takeaway
Choose CloudHSM only when dedicated HSM control is a hard requirement.
Related services
- AWS KMS
Relevant exam tasks
- D1.3