Google Cloud → AWS and Azure
AWS and Azure equivalents of Cloud HSM
The closest AWS equivalent of Google Cloud Cloud HSM is AWS Key Management Service (KMS); on Azure, Azure Key Vault and Azure Key Vault Managed HSM.
About Cloud HSM
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Keys protected in clusters of FIPS 140-2 Level 3 certified HSMs, managed through Cloud KMS. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Managed encryption keys | AWS Key Management Service (KMS) | Direct match | Azure Key Vault, Azure Key Vault Managed HSM |
Managed encryption keys Direct match
AWS KMS maps to Cloud KMS, with software, hardware (Cloud HSM), and external (Cloud EKM) protection levels.
- Customer-managed encryption keys (CMEK) integrate with many Google Cloud services.
- Cloud EKM keeps key material in a supported external key manager.