Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

AWS CloudHSM

Manage single-tenant hardware security modules (HSMs) on AWS

Get started with CloudHSM

Create an AWS account

What is CloudHSM?

AWS CloudHSM lets you manage and access your keys on FIPS-validated hardware, protected with customer-owned, single-tenant HSM instances that run in your own Virtual Private Cloud (VPC).

Benefits

Generate and use cryptographic keys

Generate and use cryptographic keys on dedicated FIPS 140-2 Level 3 single-tenant HSM instances

Deploy workloads with high reliability

Deploy workloads with high reliability and low latency, and help meet regulatory compliance

Manage HSM capacity

Manage HSM capacity and control your costs by adding and removing HSMs from your cluster

Pay by the hour

Pay by the hour, and backup and shut down HSMs when they’re not needed

Use cases

Encrypt data at rest

Protect data and achieve regulatory compliance.

Learn more about encryption

Offload SSL processing for web servers

Confirm web service identities and establish secure HTTPS connections over the internet using SSL and TLS.

Learn more about SSL processing

Protect private keys for an issuing CA

Secure and house your private keys, and sign certificate requests, so you can act securely as an issuing certificate authority (CA).

Learn more about issuing CA

Activate TDE for Oracle databases

Store the transparent data encryption (TDE) encryption key for supported Oracle database servers.

Learn more about activating TDE

How to get started

Start generating and using your own encryption keys with ease on AWS

Start using AWS CloudHSM

Learn how to integrate CloudHSM into your own applications

Review documentation and examples

Explore more of AWS