thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

AWS CloudHSM

AWS service providing dedicated, single-tenant hardware security modules in your VPC under your exclusive control.

Definition

CloudHSM provides FIPS-validated HSMs in clusters across AZs where the customer manages keys and users; AWS cannot access the keys. It supports industry-standard APIs such as PKCS#11, JCE and Microsoft CNG, and can back a KMS custom key store.

Example

A payments company stores its signing keys in CloudHSM to meet a requirement for single-tenant HSMs under its sole control.

Exam tip

Choose CloudHSM over KMS when requirements specify dedicated single-tenant HSMs or exclusive customer control of keys.

Related terms