Amazon just announced the launch of CloudHSM, a new service that provides Amazon Web Services users who need to meet corporate, contractual and regulatory compliance requirements for data security a way to do so by using a dedicated Hardware Security Module (the \u2018HSM\u2019 in CloudHSM) within the Amazon cloud.<\/p>\n
Until now, Amazon argues, the only option for many companies that use its cloud services was to store their most sensitive data \u2013 or the encryption keys to it \u2013 in their own on-premise data centers. This, of course, made it hard for these companies to fully migrate their applications to the cloud.<\/p>\n
The new service, Amazon writes, can be used to support \u201ca variety of use cases and applications, such as database encryption, Digital Rights Management (DRM), and Public Key Infrastructure (PKI) including authentication and authorization, document signing, and transaction processing.\u201d The actual appliances are Luna SA modules from SafeNet, Inc.<\/p>\n
The new CloudHSM service uses Amazon\u2019s Virtual Private Cloud (VPC) and the appliances are provisioned inside the user\u2019s VPC with an IP address the user specifies.<\/p>\n
The service, Amazon says, provides businesses with secure key storage and protects these keys with \u201ctamper-resistant HSM appliances that are designed to comply with international (Common Criteria EAL4+) and U.S. Government (NIST FIPS 140-2) regulatory standards for cryptographic modules.<\/p>\n
Because the HSMs are located close to the user\u2019s EC2 cloud computing instances, network latency should be very low.<\/p>\n
All of this, however, doesn\u2019t come cheap. The upfront cost to provision a CloudHSM is $5,000 and the hourly cost are $1.88 per hour, which comes out to $1,373 on average per month.<\/p>\n
For businesses that need this kind of security, that\u2019s probably a small price to pay, but this is clearly not a service that\u2019s geared toward startups that just want to ensure their encryption keys and data are stored safely.<\/p>\n
The HSM client software can load balance requests across two or more CloudHSMs, though Amazon notes that it can take \u201cseveral weeks\u201d to provision more than two HSMs.<\/p>\n","protected":false},"excerpt":{"rendered":"Amazon just announced the launch of CloudHSM, a new service that provides Amazon Web Services users who need…\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[780],"tags":[479,494],"class_list":{"0":"post-2198","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-internet-of-things","7":"tag-latest-news","8":"tag-web-service-news"},"yoast_head":"\n