KMS vs HSM: The Difference Between a Key Management Service and a Hardware Security Module
If you use AWS KMS, your security keys already live inside hardware security modules. AWS states that keys created in the service are protected by FIPS 140-3 Security Level 3 validated HSMs. However, choosing between a standalone key management service (KMS) and a dedicated hardware security module (HSM) is