Hi, Ryan, and welcome back.
Now, in today's video, we will be discussing about some of the important pointers specifically related
to the Cloud HSM service.
The first important point is related to the security boxes.
Now, do note that if you want to make use of local authorities and you need to have a VPC, so the
cloud HSM runs in your own virtual private cloud, which enables you to easily use it in mid-air applications
running that are in the EC2 instance.
So let's say that you have multiple DC two instances.
Now, since the cloud ageism also runs inside the VPC, it is very easy for the oral communication to
take place securely.
Second important point is related to the separation of duties.
Now do note that when we discuss about the cloud, it is them.
There are two entities that are involved.
First one is database administrator and second one is the you who has launched the cloud.
It is him.
So basically it admins monitors the health and the network availability of your HSM.
So there is a connection that does take place, but it does not really get involved in the creation
and management of the key material that is stored within you.
It is in so doing that control of the keys and the cryptographic operations falls on you.
However, it does manage the appliance in terms of health as well as the network availability.
So you can see that there are two partitions was one this way you do this again, one is for you, over
to you, and hence you have a separation of duties and a rule based access control that is inherent
part of the design for the eatables cloud it is in.
The third important point is related to the load balancing and the high availability.
So cloud HSM automatically load balances the request and also securely duplicates the key that are stored
in any HSM to all.
It is another part of your cluster.
So one important part to note is that you can have multiple little outages in running and these would
form to be clusters.
So if you see you have a cluster video, a cloud HSM which is present in availability zone one and another
cloud HSM appliance available in the availability zone two.
And this kind of a configuration is recommended.
So it is recommended that you run at least two it same across multiple availability zone so that in
case if one of them goes down, you still have the other one available for use.
And when you have multiple cloud edges in a cluster, as we were discussing, the keys are also duplicated
here.
So along with this view, more important pointers that needs to be noted.
First one is that the cloud, it is every single training date, which basically means that a single
physical device is only for, you know, sharing of physical device takes place in cloud.
It is second is it must be used within the we PCB already discussing cloud.
ITSM can also integrate with various other IT services like creative ideas for regular etc. and they
are also FIPS validated.
So these are some of the important point as well.
Cloud racism and with this will conclude today's video.