AWS Security Cookbook

How it works...

In this recipe, we initialized a CloudHSM cluster and created our first HSM within it. I used the default VPC for convenience. You can also use it if you are experimenting with HSM for learning purposes. For practical use cases, we should install HSM in a private subnet within a custom VPC for added security. We will look at VPCs in detail in the next chapter.

Before initializing the cluster, we need to download a CSR and sign it. For practical use cases, a certificate authority such as Verisign should sign it to create a signed certificate. For development and testing purposes, we can use a self-signed certificate to sign it using OpenSSL. To do this, follow these steps:

1. Create a private key using OpenSSL.
2. Use the private ...