You are on page 1of 3

Home » AWS Certification Cheat Sheets » AWS Certified Developer

Associate Cheat Sheets » AWS Security, Identity and Compliance » AWS


CloudHSM

General AWS CloudHSM Concepts


AWS CloudHSM is a cloud-based hardware security module (HSM) that
enables you to easily generate and use your own encryption keys on the AWS
Cloud.

With CloudHSM, you can manage your own encryption keys using FIPS 140-2
Level 3 validated HSMs.

CloudHSM offers you the flexibility to integrate with your applications using
industry-standard APIs, such as PKCS#11, Java Cryptography Extensions
(JCE), and Microsoft CryptoNG (CNG) libraries.

CloudHSM is standards-compliant and enables you to export all of your keys


to most other commercially-available HSMs, subject to your configurations.

It is a fully-managed service that automates time-consuming administrative


tasks for you, such as hardware provisioning, software patching, high-
availability, and backups.

CloudHSM also enables you to scale quickly by adding and removing HSM
capacity on-demand, with no up-front costs.

CloudHSM runs in your VPC.

The following table helps to understand the key differences between AWS
CloudHSM and AWS KMS:
Get Started Find Answers

AWS Certification Path Latest Blog Articles

Free AWS Certication Guide FAQ

AWS Training Courses Join our Slack Channels

AWS Practice Exams Join our Facebook Group

AWS Books for Offline Study Join our LinkedIn Group

Connect Follow

About us Facebook

Connect with Neal LinkedIn

Contact us Youtube

Submit Feedback Twitter

Join our Team Instagram

AWS Training Resources

AWS Cloud Practitioner

AWS Solutions Architect

AWS Developer Associate

AWS SysOps Administrator


y p

AWS Solutions Architect PRO

AWS Certification Training - Master Amazon Web Services

© 2021 Digital Cloud Training | Privacy Policy | Terms of Service | Sitemap

You might also like