Posts tagged KMS

3 posts

SecurityApr 23, 2026

Cloud Sovereignty for the Board — A 3-Tier Architecture That Maps Data Sensitivity to Control Level

Your board asks 'is our data safe in the cloud?' The answer is not yes or no — it is a classification decision that maps each workload to the right control tier. Here is the framework, with the metadata exposure gap most teams miss.

7 min read

#AWS#Sovereignty

CloudMar 5, 2026

When Your Keys Get Locked In: Navigating AWS KMS Import Limitations

AWS KMS doesn't allow key material export by design. When an external PKI partner generates keys but doesn't retain them, you're stuck. Here are the four AWS alternatives — CloudHSM, XKS, Private CA, and fixing the process — with a decision framework to pick the right one.

14 min read

#AWS#KMS

SecurityFeb 4, 2026

Cloud Sovereignty Deep Dive - AWS KMS Control Plane Analysis

XKS protects key material from extraction, but does it protect against legal compulsion to use those keys? Updated with AWS European Sovereign Cloud (GA January 2026).

13 min read

#Security#AWS

Back to Blog