AWS CloudHSM is a cloud-based hardware security module (HSM) that enables generation and use of your own encryption keys on the AWS Cloud.
With CloudHSM:
- Manage your own encryption keys using FIPS 140-2 Level 3 validated HSMs.
- Integrate with your applications using industry-standard APIs (such as PKCS#11, Java Cryptography Extensions (JCE), and Microsoft CryptoNG (CNG) libraries).
- Scale quickly by adding and removing HSM capacity on-demand, with no upfront costs.
CloudHSM is standards-compliant and enables exportation of all of your keys to most other commercially-available HSMs, subject to your configurations. It is a fully-managed service that automates time-consuming administrative tasks (such as hardware provisioning, software patching, high-availability, and backups).
Use the AWS public cloud integration to discover and collect metrics against the AWS service.
External reference
Setup
To set up the AWS integration and discover the AWS service, go to AWS Integration Discovery Profile and select AWS Cloud HSM.
Event support
CloudTrail event support
- Supported
- Configurable in OpsRamp AWS Integration Discovery Profile.
CloudWatch alarm support
- Supported
- Configurable in OpsRamp AWS Integration Discovery Profile.
Supported metrics
| OpsRamp Metric | AWS Metric | Metric Display Name | Unit | Aggregation Type | Description |
|---|---|---|---|---|---|
| aws_cloudhsm_HsmUnhealthy | HsmUnhealthy | Hsm Unhealthy | None | Average | The HSM instance is not performing properly. AWS CloudHSM automatically replaces unhealthy instances for you. |
| aws_cloudhsm_HsmTemperature | HsmTemperature | Hsm Temperature | None | Average | The junction temperature of the hardware processor. The system shuts down if temperature reaches 110 degrees Centigrade. |
| aws_cloudhsm_HsmKeysSessionOccupied | HsmKeysSessionOccupied | Hsm Keys Session Occupied | None | Average | The number of session keys being used by the HSM instance. |
| aws_cloudhsm_HsmKeysTokenOccupied | HsmKeysTokenOccupied | Hsm Keys Token Occupied | None | Average | The number of token keys being used by the HSM instance and the cluster. |
| aws_cloudhsm_HsmSslCtxsOccupied | HsmSslCtxsOccupied | Hsm Ssl Ctxs Occupied | None | Average | The number of end-to-end encrypted channels currently established for the HSM instance. Up to 2,048 channels are allowed. |
| aws_cloudhsm_HsmSessionCount | HsmSessionCount | Hsm Session Count | None | Average | The number of open connections to the HSM instance. |
| aws_cloudhsm_HsmUsersAvailable | HsmUsersAvailable | Hsm Users Available | None | Average | The number of additional users that can be created. This equals the maximum number of users (listed in HsmUsersMax) minus the users created to date. |
| aws_cloudhsm_HsmUsersMax | HsmUsersMax | Hsm Users Max | None | Average | The maximum number of users that can be created on the HSM instance. |
| aws_cloudhsm_InterfaceEth2OctetsInput | InterfaceEth2OctetsInput | Interface Eth2Octets Input | None | Average | The cumulative sum of incoming traffic to the HSM to date. |
| aws_cloudhsm_InterfaceEth2OctetsOutput | InterfaceEth2OctetsOutput | Interface Eth2Octets Output | None | Average | The cumulative sum of outgoing traffic to the HSM to date. |
| aws_cloudhsm_InterfaceEth2DroppedInput | InterfaceEth2DroppedInput | Interface Eth2Dropped Input | None | Average | Interface Eth2 Packets Input. |
| aws_cloudhsm_InterfaceEth2DroppedOutput | InterfaceEth2DroppedOutput | Interface Eth2Dropped Output | None | Average | Interface Eth2 Packets Output. |
| aws_cloudhsm_InterfaceEth2ErrorsInput | InterfaceEth2ErrorsInput | Interface Eth2Errors Input | None | Average | Interface Eth2 Errors Input. |
| aws_cloudhsm_InterfaceEth2ErrorsOutput | InterfaceEth2ErrorsOutput | Interface Eth2Errors Output | None | Average | Interface Eth2 Errors Input. |