Hardware Security Module Aws

This feature is available for aws iot greengrass core v1 7 and later.

Hardware security module aws.

Aws iot greengrass supports the use of hardware security modules hsm through the pkcs 11 interface for secure storage and offloading of private keys. This type of device is used to provision cryptographic keys for critical functions such as encryption decryption and authentication for the use of applications identities and databases. Aws cloudhsm is a cloud based hardware security module hsm that enables you to easily generate and use your own encryption keys on the aws cloud. This prevents keys from being exposed or duplicated in software.

With cloudhsm you can manage your own encryption keys using fips 140 2 level 3 validated hsms. This non proprietary cryptographic module security policy for the aws key management service kms hardware security module hsm from amazon web services aws provides an overview of the hsm and a high level description of how it meets the security requirements of fips 140 2. For example businesses may use an hsm to secure trade secrets that have significant value by ensuring. Legacy hsm for on premises encryption key management.