Creating a CloudHSM cluster

In this recipe, we will create an AWS CloudHSM cluster. CloudHSM is a dedicated hardware security module (HSM) on the AWS Cloud that we can use to generate and use our own encryption keys. AWS KMS, on the other hand, uses shared HSM. While KMS only allows us to use symmetric keys, CloudHSM supports both symmetric and asymmetric keys.

Getting ready

We need a working AWS account to complete this recipe.

CloudHSM usage costs more than KMS, and CloudHSM doesn't have a free tier either. If you are following these recipes for learning purposes, you should clean up the resources that you created after completing all the recipes related to CloudHSM.

...