4 ms·
This is actually a really cool feature - the CloudHSM offering is both (very) expensive and not user friendly. This should help with big clients requiring HSMs
by iancarroll 12y ago
This is actually a really cool feature - the CloudHSM offering is both (very) expensive and not user friendly. This should help with big clients requiring HSMs or the like.
So many cool services could be built with this if there's an open API.
Edit: Sadly, it seems there's no out of the box ELB support... Would be great for TLS termination.
- bgentry 12y agoFor ELB TLS termination, AWS already stores your TLS key securely in IAM, probably using some of the same underlying technologies. What sort of integration do you want between KMS and ELB?
- iancarroll 12y agoSecurely doesn't equate to what a HSM provides. I'd be doubtful if they are (using them) right now... If IAM gets compromised, an attacker can take the key and run, opposed to them only being able to use it while they have access to the HSM. Not saying it's likely to happen.