Hsm

Source: src/AWS/CloudHSMV2/Hsm.ts

A hardware security module (HSM) inside an AWS CloudHSM Cluster.

HSMs take roughly 10-20 minutes to provision and are billed hourly while they exist. The cluster must be in the UNINITIALIZED, ACTIVE, or DEGRADED state to accept a new HSM. Destroy HSMs you are not using.

Creating an HSM

HSM in a Cluster’s Availability Zone

const hsm = yield* Hsm("Primary", {
  clusterId: cluster.clusterId,
  availabilityZone: "us-west-2a",
});

HSM with a Fixed ENI Address

const hsm = yield* Hsm("Primary", {
  clusterId: cluster.clusterId,
  availabilityZone: "us-west-2a",
  ipAddress: "10.0.1.20",
});