Keys, secrets & certificates
AWS CloudHSM vs Azure Cloud HSM
AWS CloudHSM maps to Azure Cloud HSM.
Azure Dedicated HSM, the older option, is closed to new customers and supported until July 31, 2028.
Side-by-side comparison
| Aspect | Amazon Web Services | Microsoft Azure |
|---|---|---|
| Service | AWS CloudHSM | Azure Cloud HSM |
| Lifecycle | Generally available | Generally available |
| What it is | Single-tenant HSM clusters in your VPC, FIPS 140-2 or 140-3 Level 3 validated in FIPS mode, accessed through PKCS#11, JCE, and OpenSSL libraries. | Highly available, single-tenant HSM clusters (FIPS 140-3 Level 3) where you have full administrative control, accessed through PKCS#11, JCE, and OpenSSL. It succeeds Azure Dedicated HSM, which is closed to new customers and supported until July 31, 2028. |
| Pricing model | Per HSM-hour. | Per HSM cluster-hour (see the pricing page). |
| Docs | AWS CloudHSM docs | Azure Cloud HSM docs |
| Pricing page | AWS CloudHSM pricing | Azure Cloud HSM pricing |
| Exams | SCS-C03 | SC-500 |
Key differences
- Both are single-tenant, highly available HSM clusters that you administer, with PKCS#11, JCE, and OpenSSL client libraries. CloudHSM clusters run in FIPS or non-FIPS mode. Azure Cloud HSM is FIPS 140-3 Level 3 validated.
- For keys that Azure services use for encryption at rest, Managed HSM is usually the better fit, because Cloud HSM targets IaaS and custom application workloads.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per HSM-hour. AWS CloudHSM pricing →
- Azure
- Per HSM cluster-hour (see the pricing page). Azure Cloud HSM pricing →
Certification exam mapping
| Exam | Provider | Level | Status |
|---|---|---|---|
| AWS Certified Security – Specialty SCS-C03 | AWS | Specialty | current The current code (SCS-C03) is taken from the exam-prep link on the official certification page. Simplified Chinese, Spanish (Latin America), and Portuguese (Brazil) versions retire after Dec 31, 2026. |
| Microsoft Certified – Cloud and AI Security Engineer Associate SC-500 | Azure | Associate | current New certification. A practice assessment isn't available yet, which the page says usually means the exam recently left (or is in) beta. |
Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.
Verification notes
- Azure Dedicated HSM is closed to new customers and supported until July 31, 2028. Use Cloud HSM or Managed HSM.
FAQ
What is the Azure equivalent of AWS CloudHSM?
AWS CloudHSM maps to Azure Cloud HSM. Azure Dedicated HSM, the older option, is closed to new customers and supported until July 31, 2028.
How does pricing compare between AWS CloudHSM and Azure Cloud HSM?
AWS: Per HSM-hour. Azure: Per HSM cluster-hour (see the pricing page). Check the official pricing pages for current rates.
Which certification exams cover this topic?
AWS Certified Security – Specialty (SCS-C03); Microsoft Certified – Cloud and AI Security Engineer Associate (SC-500).