CloudHSM 这个产品是通常是用于什么场景？和 KMS 有什么分别吗？
pythonee · 2018-11-24 11:27:06 +08:00 · 3665 次点击这是一个创建于 2226 天前的主题，其中的信息可能已经有所发展或是发生改变。
安全小白，用过的同学能否帮忙解释下
 |
1
paulw54jrn 2018-11-24 18:42:55 +08:00
搬运工。
KMS 经常用，CloudHSM 没接触过.. Q: How does AWS Key Management Service (KMS) compare to AWS CloudHSM? AWS Key Management Service (KMS) is a multi-tenant, managed service that allows you to use and manage encryption keys. Both services offer a high level of security for your cryptographic keys. AWS CloudHSM provides a dedicated, FIPS 140-2 Level 3 HSM under your exclusive control, directly in your Amazon Virtual Private Cloud (VPC). |
|
2
paulw54jrn 2018-11-24 18:43:16 +08:00
Q: When should I use AWS CloudHSM instead of AWS KMS?
You should consider using AWS CloudHSM if you require: Keys stored in dedicated, third-party validated hardware security modules under your exclusive control. FIPS 140-2 compliance. Integration with applications using PKCS#11, Java JCE, or Microsoft CNG interfaces. High-performance in-VPC cryptographic acceleration (bulk crypto). |
 |
3
pythonee OP @paulw54jrn 后面确实也翻到了，第一时间没读完，感谢
|
 |
4
julyclyde 2018-11-25 08:43:17 +08:00
@paulw54jrn 感觉这意思主要是合规性要求？
|
Select Language