undefined | Better HN

0 pointsp0rkbelly7y ago0 comments

...and that's without a FIPS 140-2 Level 3 backend for a HSM as well, right? (Secrets Manger has that I assume).

With Vault 1) you have to get Hashi Enterprise 2) Pay for a very pricey HSM.

0 comments

0xCMP7y ago

No, I believe they just use KMS or GCM either which is backed by an HSM and it's recommended in their documentation.

j / k navigate · click thread line to collapse

0 pointsp0rkbelly7y ago0 comments

...and that's without a FIPS 140-2 Level 3 backend for a HSM as well, right? (Secrets Manger has that I assume).

With Vault 1) you have to get Hashi Enterprise 2) Pay for a very pricey HSM.

0xCMP7y ago

No, I believe they just use KMS or GCM either which is backed by an HSM and it's recommended in their documentation.

j / k navigate · click thread line to collapse