{"id":649002,"date":"2013-03-27T00:15:05","date_gmt":"2013-03-27T04:15:05","guid":{"rendered":"http:\/\/gigaom.com\/?p=624688"},"modified":"2013-03-27T00:15:05","modified_gmt":"2013-03-27T04:15:05","slug":"new-amazon-cloudhsm-service-vows-enterprise-grade-security","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/649002","title":{"rendered":"New Amazon CloudHSM service vows enterprise-grade security"},"content":{"rendered":"

Amazon Web Services runs on tons and tons of shared hardware. That’s a huge benefit in terms of cost but also spooks customers with strict regulatory requirements that prevent them from running their applications on shared infrastructure.<\/p>\n

But now, as Amazon tries to woo these picky customers, it’s trying to replicate some of the perks that come with dedicated, on-premises hardware. That’s what the\u00a0new\u00a0CloudHSM<\/a>\u00a0service is about. Traditionally, a Hardware Security Module is a dedicated, hardened box for storing keys and running\u00a0cryptography. Amazon says it can bring that dedicated security to its customers within its infrastructure.<\/p>\n

.<\/p>\n

\"cloudhsm\"<\/a><\/p>\n

In a Tuesday night blog post<\/a>, Amazon said CloudHSM:<\/p>\n

\n

“brings the benefits of HSMs to the cloud. You retain full control of the keys and the cryptographic operations performed by the HSM(s) you create, including exclusive, single-tenant access to each one. Your cryptographic keys are protected by a tamper-resistant HSM that is designed to meet a number of international and US Government standards including\u00a0NIST FIPS 140-2<\/a>\u00a0and\u00a0Common Criteria<\/a>\u00a0EAL4+.”<\/p>\n<\/blockquote>\n

Each CloudHSM provisioned for the customer incurs an upfront, one-time $5,000 fee and then an hourly rate of $1.88 per hour or $1,373 per month. Pricing is \u00a0here.<\/a><\/p>\n

Bringing on-prem perks to public infrastructure<\/h2>\n

Amazon has made progress in offering more enterprise-grade cloud capabilities with its GovCloud <\/a>services and Virtual Private Cloud <\/a>capabilities. But still, even some of the biggest AWS customers will only put parts of their workloads on the Amazon cloud. The mission-critical goodies stay on premises or on private clouds.<\/p>\n

That’s why Amazon has to get more acclimated with private cloud capabilities — observers say one reason that AWS might be building a private cloud for the CIA<\/a>, as has been reported, is to prove its credibility there. \u00a0And that’s why we’ll be seeing more services like this CloudHSM service.<\/p>\n

\"\"<\/p>\n

<\/a><\/p>\n

Related research and analysis from GigaOM Pro:<\/strong>
Subscriber content. Sign up for a free trial<\/a>.<\/p>\n