Amazon RDS for Oracle Transparent Data Encryption now integrated with AWS CloudHSM in Asia Pacific (Tokyo and Singapore) AWS regions
You can now use AWS CloudHSM Classic in Asia Pacific (Tokyo) and Asia Pacific (Singapore) AWS regions to maintain sole and exclusive control of encryption keys you use to manage Oracle Transparent Data Encryption (TDE) in Amazon RDS database instances. In addition to these two new regions, AWS CloudHSM is already integrated with Amazon RDS for Oracle TDE in US East (N. Virginia), US West (Oregon), EU (Ireland), Asia Pacific (Sydney), EU (Frankfurt), and AWS GovCloud (US) AWS regions. AWS CloudHSM offers single-tenant Hardware Security Module (HSM) appliances within the AWS cloud. You can securely generate, store, and manage the cryptographic keys used for data encryption such that they are accessible only by you.
To learn more, see the Amazon RDS User Guide's section on AWS CloudHSM integration with Amazon RDS for Oracle.