Update Content: KMS now offers FIPS 140-2

Question

Per : https://aws.amazon.com/blogs/security/aws-key-management-service-now-offers-fips-140-2-validated-cryptographic-modules-enabling-easier-adoption-of-the-service-for-regulated-workloads/

KMS now uses

FIPS 140-2 validated HSMs, so both KMS and CloudHSM support FIPS140-2 compliance

Faye Ellis Answered 2 years ago · Answer 1 · 2019-03-21 11:21:10

Faye Ellis

Answered 2 years ago

great tip thank you!

joshua louis Answered 2 years ago · Answer 2 · 2019-03-23 21:00:52

joshua louis

Answered 2 years ago

Cloud HSM is FIPS 140-2 Level 3. AWS KMS is not FIPS 140-2 Level 3 for all modules

Martin Löper

Answered 2 years ago

Good point! I actually searched for this a couple of days ago, too. Here is the reference: "HSM that has been validated to FIPS 140-2 level 3 overall (the HSMs used in the standard KMS key store are validated to level 2 with level 3 in multiple categories)" [1]https://aws.amazon.com/kms/faqs/?nc1=f_ls

Update Content: KMS now offers FIPS 140-2

2 Answers

Newsletter