You retain full control of the keys and the cryptographic operations performed by the HSM(s) you create, including exclusive, single-tenant access to each one. The AWS CloudHSM service brings the benefits of HSMs to the cloud. You are the only one with access to the keys stored in an HSM. You can store your keys within an HSM and use them to encrypt and decrypt data while keeping them safe and sound and under your full control. It is a piece of hardware - a dedicated appliance that provides secure key storage and a set of cryptographic operations within a tamper-resistant enclosure. HSM is short for Hardware Security Module. The CloudHSM service helps these customers to meet strict requirements for key management without sacrificing application performance. While the items listed above are more than adequate in most situations, some of our customers are in situations where contractual or regulatory needs mandate additional protection for their keys. Today we are adding another powerful security option, the AWS CloudHSM service. The Security & Compliance Center is also home to the AWS Risk and Compliance White Paper and the AWS Overview of Security Processes. We created the AWS Security & Compliance Center to publish information about the various reports, certifications, and independent attestations that we’ve earned and to provide you with additional information about the security features that we’ve built in to AWS including Identity and Access Management, Multi-Factor Authentication, Key Rotation, support for server-side and client-side encryption in Amazon S3, and SSL support in the Elastic Load Balancer. Back in the early days of AWS, I would often receive questions that boiled down to “This sounds really interesting, but what about security?”
0 kommentar(er)
