- 최신
- 최다 투표
- 가장 많은 댓글
If you're using AWS services, integrate them with AWS Key Management Service, and then KMS integrates with CloudHSM as a custom key store.
Integrating AWS services with KMS (Access controls, IAM, etc): https://docs.aws.amazon.com/kms/latest/developerguide/control-access.html
Custom key store: https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html
Thanks Dan. I am writing a knowledge base article on CloudHSM at work and want to leave KMS out of the article if I can. I was under the impression that you could use CloudHSM on its own without going the KMS route and using custom key store. Theoretically, can you use CloudHSM without Custom Key store, and if so, how do AWS IAM and the crypto users work together to carry out cryptographic functions in your AWS account?
관련 콘텐츠
- AWS 공식업데이트됨 3년 전
- AWS 공식업데이트됨 3년 전
- AWS 공식업데이트됨 3년 전
- AWS 공식업데이트됨 6달 전
Thanks a lot for the quick response. Is it mandatory to use CloudHSM as a custom Key store in order to use it with most AWS services? I have been asked to research CloudHSM only. Can you use CloudHSM on its own? If so, will it work with all AWS services, and how do the services actually connect to CloudHSM?
Can you explain why you wouldn't want to use KMS, while using AWS services? That may help with designing a solution.
You can integrate CloudHSM with many third party secret managers as well: https://docs.aws.amazon.com/cloudhsm/latest/userguide/other-integrations.html
I am not aware of AWS services integrating directly with CloudHSM, except by one hopping via KMS.