AWS service detail

AWS CloudHSM

Cryptography & PKI

Hardware-based key storage for regulatory compliance

Cryptography & PKIProduction guidance

Production use

Use to protect keys, certificates, code signing, encryption, and trust boundaries.

Before production

  • Rotate keys/certs
  • separate duties
  • restrict key policies
  • log usage
  • test expiry handling
  • document recovery processes.