The KMS Dedicated Edition is a cloud-based key management service that exclusively uses dedicated physical hardware security modules (HSMs). Encryption operations are performed within these dedicated HSMs, and the service also provides a dedicated cryptographic resource pool.
Note:
Advantages
Security: When KMS encryption is invoked, all cryptographic operations are performed within your dedicated physical hardware security modules (HSMs). This ensures that your resources and cryptographic operations are physically isolated from those of other tenants.
High Performance: The KMS Dedicated Edition provides dedicated, high-performance encryption instances with exclusive HSM resources.
Reliability: Dedicated HSM instances are isolated from shared HSM instances in terms of risk. Failures in the shared HSM resource pool do not affect the dedicated HSM resource pool.
Flexibility: Users can customize the size of the HSM resource pool based on their performance and reliability requirements.
User Guide
Key Management
Tag Management