Google Cloud → AWS and Azure
AWS and Azure equivalents of Cloud External Key Manager
The closest AWS equivalent of Google Cloud Cloud External Key Manager is AWS Key Management Service (KMS); on Azure, Azure Key Vault and Azure Key Vault Managed HSM.
About Cloud External Key Manager
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Use keys held in a supported external key manager outside Google Cloud. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Managed encryption keys | AWS Key Management Service (KMS) | Direct match | Azure Key Vault, Azure Key Vault Managed HSM |
Managed encryption keys Direct match
AWS KMS maps to Cloud KMS, with software, hardware (Cloud HSM), and external (Cloud EKM) protection levels.
- Customer-managed encryption keys (CMEK) integrate with many Google Cloud services.
- Cloud EKM keeps key material in a supported external key manager.