1
paulw54jrn 2018-11-24 18:42:55 +08:00
搬运工。
KMS 经常用,CloudHSM 没接触过.. Q: How does AWS Key Management Service (KMS) compare to AWS CloudHSM? AWS Key Management Service (KMS) is a multi-tenant, managed service that allows you to use and manage encryption keys. Both services offer a high level of security for your cryptographic keys. AWS CloudHSM provides a dedicated, FIPS 140-2 Level 3 HSM under your exclusive control, directly in your Amazon Virtual Private Cloud (VPC). |
2
paulw54jrn 2018-11-24 18:43:16 +08:00
Q: When should I use AWS CloudHSM instead of AWS KMS?
You should consider using AWS CloudHSM if you require: Keys stored in dedicated, third-party validated hardware security modules under your exclusive control. FIPS 140-2 compliance. Integration with applications using PKCS#11, Java JCE, or Microsoft CNG interfaces. High-performance in-VPC cryptographic acceleration (bulk crypto). |
3
pythonee OP @paulw54jrn 后面确实也翻到了,第一时间没读完,感谢
|
4
julyclyde 2018-11-25 08:43:17 +08:00
@paulw54jrn 感觉这意思主要是合规性要求?
|