3 ms·
If you're running in AWS with any secret management service that isn't using CloudHSM, you're trusting AWS with your key material. There surely is some amount
by ryan_lane 11y ago
If you're running in AWS with any secret management service that isn't using CloudHSM, you're trusting AWS with your key material.
There surely is some amount of trust there, though.
- ppierald 11y agoMy undertanding was that the Customer Master Key was stored in an HSM, but your customer-generated keys were not. I might be wrong about that. So if true, AWS employees would not have access to your root key material, but the definitely the intermediary key material. It's a cost trade-off
- jamiesonbecker 11y agoEither way, you have to bootstrap secret material onto your instances somehow, so you've got to trust Amazon somewhere. Not to diminish your point -- the how/where/when really does matter. Locking your house key in your car is still better than leaving it on your front step, but also not as good as in your pocket.