External Key Storage for AWS (XKS) by Eviden

Eviden provides an end-to-end managed service delivering strong, trusted cryptographic assets in a SaaS model, fully integrated with the AWS KMS XKS feature. External key storage for AWS by Eviden provides a highly secure and easy way to store and manage the customer’s keys with exclusive control over the encryption process. The customer is autonomous and can generate and manage its keys by preference, and Eviden is continuously monitoring the service, offering 24/7 operations and support.

Eviden developed the XKS proxy that acts as a mediator between the AWS KMS and the HSM stored outside of AWS cloud, where the additional keys are residing, in a secure, dedicated location. The XKS proxy is part of a front-end on AWS, interconnected to customers’ environments through AWS Private Link and to the HSM through an AWS Direct Connect.

Eviden, by using its own product Trustway Proteccio (a hardware security module - HSM) ensures safeguarding and management of digital keys for protecting critical data from unauthorized use or theft. Trustway Proteccio has multiple security certifications and qualifications (CC EAL4+, ANSSI reinforced qualification, NATO Secret, EU Restricted).

Integration with most AWS services (Amazon EBS, AWS Lambda, Amazon S3, Amazon DynamoDB, and over 100 more services)