Home › AWS Security › cloudcomputing › scsdatagov › Which AWS service provides dedicated FIPS 140-2 …
Which AWS service provides dedicated FIPS 140-2 Level 3 HSMs for tenants with strict regulatory requirements (e.g. PCI-DSS encryption-key custody)?
AAmazon RDS
BAmazon Macie
CAWS CloudHSM
DAmazon Route 53
Answer & Solution
Correct answer: C. AWS CloudHSM
CloudHSM is the dedicated FIPS-3 HSM (per SCS-C02 §5.2). The others aren't HSMs.
Related questions
Which AWS service helps a security engineer collect evidence for compliance audits — assesWhich AWS service provides a turnkey multi-account landing-zone with guardrails, account fWhich AWS Organization feature lets a security engineer enforce 'deny all use of root userWhich AWS service centrally manages multiple AWS accounts with consolidated billing, SCPs,Which AWS service automatically discovers and classifies sensitive data (PII, financial daWhich AWS feature lets a security engineer enforce 'no S3 bucket can be made public' acrosWhich Amazon S3 feature enforces WORM (write-once-read-many) data retention to protect logWhich AWS service lightweight-stores parameters + SecureString secrets, integrated with KM