Unified cryptographic services including Key Management Service for envelope encryption, Cloud Secret Management Service for secret storage and rotation, Key Pair Service for SSH key management, and Dedicated HSM for FIPS 140-2 Level 3 workloads
FluffyStack toolsJurisdictional exposure
Attributes
- Fips
- 140-2 Level 3
Sub-services (3)
Key Management Service
Envelope-encryption master keys with automatic rotation
Cloud Secret Management Service
Versioned secret storage with automatic rotation and access logging
Dedicated HSM
Single-tenant FIPS 140-2 Level 3 hardware security modules
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (6)
- CN North - Beijing 1 · BeijingHuawei Cloud China
- CN North - Beijing 4 · BeijingHuawei Cloud China
- CN East - Shanghai 2 · ShanghaiHuawei Cloud China
- CN East - Shanghai 3 · ShanghaiHuawei Cloud China
- CN South - Guangzhou · GuangzhouHuawei Cloud China
- CN Southwest - Guiyang · GuiyangHuawei Cloud China
Commercial regions (19)
Europe (3)
- EU-Paris
- EU-Dublin
- TR-Istanbul
North America (1)
- LA-Mexico City
South America (4)
- LA-Buenos Aires 1
- LA-São Paulo 1
- LA-Santiago
- LA-Lima
Asia (6)
- AP-Hong Kong
- AP-Jakarta
- AP-Kuala Lumpur
- AP-Manila
- AP-Singapore
- AP-Bangkok
Middle East (1)
- ME-Riyadh
Africa (4)
- ME-Cairo
- AF-Casablanca
- AF-Lagos
- AF-Johannesburg
Tags
Equivalent services on other platforms
Create and manage cryptographic keys for encryption at rest and in transit with AWS-managed, customer-managed, and imported keys, automatic rotation, and FIPS 140-2 validated HSMs
Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement
Cloud-hosted key management for encryption at rest with symmetric and asymmetric keys, customer-supplied keys, HSM-backed keys, and automatic rotation
Key management service for symmetric and asymmetric keys, certificates, and other secret material — pluggable backends include software KMS, HSM via PKCS#11, Vault, and KMIP-compliant appliances. Equivalent to AWS KMS / Azure Key Vault / Cloud KMS in the cross-provider mapping
Centralised key and secret management service with HSM-backed symmetric and asymmetric keys, automatic rotation, and envelope encryption for OCI resources
Managed cryptographic key service with customer master keys (CMKs), envelope encryption for Tencent services, automatic and manual rotation, imported key material (BYOK), Managed HSM for single-tenant FIPS 140-2 Level 3 compliance, and audit logging via CloudAudit