Keys, secrets & certificates · AWS vs Google Cloud

AWS CloudHSM vs Single-tenant Cloud HSM

AWS CloudHSM maps to Single-tenant Cloud HSM, which gives a single-tenant instance of HSM partitions for your exclusive use, managed through Cloud KMS.

Direct match Use it to: Run your own hardware security modules for PKCS#11 apps, CA keys, TLS offload, or database TDE, with full administrative control.

Last verified: Oct 27, 2026 · Edit on GitHub · Report an error

Side-by-side comparison

Single-tenant HSMs under your control: AWS vs Google Cloud side by side
Aspect	Amazon Web Services	Google Cloud
Service	AWS CloudHSM	Single-tenant Cloud HSM
Lifecycle	Generally available	Generally available
What it is	Single-tenant HSM clusters in your VPC, FIPS 140-2 or 140-3 Level 3 validated in FIPS mode, accessed through PKCS#11, JCE, and OpenSSL libraries.	A single-tenant instance of HSM partitions for your exclusive use, managed through Cloud KMS.
Pricing model	Per HSM-hour.	Single-tenant Cloud HSM incurs instance charges; see Cloud KMS pricing.
Docs	AWS CloudHSM docs	Single-tenant Cloud HSM docs
Pricing page	AWS CloudHSM pricing	Single-tenant Cloud HSM pricing

Key differences

Single-tenant keys are created and used through Cloud KMS rather than by connecting directly to the HSM like CloudHSM.
Multi-tenant Cloud HSM uses FIPS 140-2 Level 3 certified HSMs.

Pricing summary

Pricing models only. No prices are quoted because they change by region and over time.

AWS: Per HSM-hour. AWS CloudHSM pricing →
GCP: Single-tenant Cloud HSM incurs instance charges; see Cloud KMS pricing. Single-tenant Cloud HSM pricing →

And on Azure?

Direct match Azure's equivalent is Azure Cloud HSM. AWS vs Azure comparison →

Verification notes

Single-tenant Cloud HSM launch stage and API details were not fully confirmed on 2026-10-27.

FAQ

What is the Google Cloud equivalent of AWS CloudHSM?

AWS CloudHSM maps to Single-tenant Cloud HSM, which gives a single-tenant instance of HSM partitions for your exclusive use, managed through Cloud KMS.

How does pricing compare between AWS CloudHSM and Single-tenant Cloud HSM?

AWS: Per HSM-hour. Google Cloud: Single-tenant Cloud HSM incurs instance charges; see Cloud KMS pricing. Check the official pricing pages for current rates.

What is the Azure equivalent?

Azure Cloud HSM (direct match). AWS CloudHSM maps to Azure Cloud HSM.