Amazon Web Services → Microsoft Azure
Azure equivalent of AWS CloudHSM
AWS CloudHSM maps to Azure Cloud HSM.
About AWS CloudHSM
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Single-tenant HSM clusters in your VPC, FIPS 140-2 or 140-3 Level 3 validated in FIPS mode, accessed through PKCS#11, JCE, and OpenSSL libraries. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Single-tenant HSMs under your control | Azure Cloud HSM | Direct match |
Keys, secrets & certificates(1)
Single-tenant HSMs under your control Direct match
AWS CloudHSM maps to Azure Cloud HSM. Azure Dedicated HSM, the older option, is closed to new customers and supported until July 31, 2028.
- Both are single-tenant, highly available HSM clusters that you administer, with PKCS#11, JCE, and OpenSSL client libraries. CloudHSM clusters run in FIPS or non-FIPS mode. Azure Cloud HSM is FIPS 140-3 Level 3 validated.
- For keys that Azure services use for encryption at rest, Managed HSM is usually the better fit, because Cloud HSM targets IaaS and custom application workloads.