https://medium.com/@kenhuiny/encrypting-your-data-using-aws-kms-custom-key-store-with-cloudhsm-40221d135a94

Kenneth HuiBlockedUnblockFollowFollowingDec 18I tend to follow cloud security news closely these days, particularly anything related to data encryption. That’s why one of the AWS re:Invent announcements that was of most interest to me actually occurred at the beginning of the conference, before the first keynote. Amazon Web Services announced the general availability of KMS custom key store, allowing users of AWS CloudHSM to take advantage of the AWS Key Management Service (KMS).

You can read more about KMS custom key store and the problems it solves for customers in this AWS security blog post. Primarily, custom key stores give users that have stringent security requirements the best of both worlds.