Use Cases

Service

References

KMS

• Migrate resources from KMS 1.0 to a KMS 3.0 instance

• Migrate keys across regions

• Migrate secrets across regions

• Use an instance RAM role to access KMS

• Access a KMS instance across regions

• Query usage records for keys and secrets

• Use KMS to encrypt Kubernetes Secrets at rest

• Use a key to encrypt and decrypt data

• Use envelope encryption

• Rotate generic secrets by using Function Compute

• Deploy KMS Agent in ACK to retrieve secrets

• Use KMS to build MaxCompute UDFs to encrypt and decrypt data

• Retry requests with exponential backoff

CloudHSM

• Encrypt and decrypt sensitive data with EVSM

• Secure SSL offloading based on CloudHSM

• Secure SSL offloading based on CloudHSM

• Configure CloudHSM cluster for KMS hardware instance

• Copy keys between HSMs

• Import key material into an HSM