AWS CloudHSM makes periodic backups of your cluster at least once every 24 hours. Each backup contains encrypted copies of the following data:
-
Users (COs, CUs, and AUs)
-
Key material and certificates
-
Hardware security module (HSM) configuration and policies
You can't instruct the service to make backups, but you can take certain actions that force the service to create a backup. The service makes a backup when you perform any of the following actions:
-
Activate a cluster
-
Add an HSM to an active cluster
-
Remove an HSM from an active cluster
AWS CloudHSM deletes backups based on the backup retention policy you set when you create clusters. For information about managing backup retention policy, see Configure backup retention.
Topics
