AWS Certified Solutions Architect Associate SAA-C03 Practice Question

The service offered by the cloud provider that meets the requirement of FIPS 140-2 validated hardware for key storage and management is CloudHSM. This service provides dedicated hardware security modules within the cloud environment, allowing customers to manage their own encryption keys in compliance with strict regulatory standards. While the Key Management Service provides management of encryption keys, it does not offer customer-controlled hardware security modules, making it potentially non-compliant with certain regulations demanding FIPS 140-2 validation. Secrets storage and management service and the object storage service with encryption capabilities do not directly address the necessity for validated hardware-based key storage and management.