AWS CloudHSM endpoints and quotas - AWS General Reference

AWS CloudHSM endpoints and quotas

This section lists the the service endpoints and service quotas for the service. To connect programmatically to an AWS service, you use an endpoint. For more information, see AWS service endpoints.

In addition to the standard AWS endpoints, some AWS services offer the following endpoints in some or all of the AWS Regions that the service is supported in:

  • IPv4 endpoints — These endpoints support only IPv4 requests and have the following format: service-name.region.amazonaws.com

  • Dual-stack endpoints — These endpoints support both IPv4 requests and IPv6 requests and have the following format: service-name.region.api.aws

  • FIPS endpoints — These endpoints comply with the Federal Information Processing Standards (FIPS) and can support either IPv4 requests or dual-stack (IPv4 and IPv6) requests. FIPS endpoints have the following format: service-name-fips.region.ip-endpoint-type, where ip-endpoint-type is amazonaws.com (for IPv4 requests) or api.aws (for IPv4 or IPv6 requests).

Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.

Note

AWS recommends that you use Regional STS endpoints within your applications, and avoid using global (legacy) STS endpoints. Regional STS endpoints reduce latency, build in redundancy, and increase session token validity. For more information about configuring your applications to use a Regional STS endpoint, see AWS STS Regionalized endpoints in the AWS SDKs and Tools Reference Guide. For more information about global (legacy) AWS STS endpoints, including how to monitor for use of this type of endpoint, see How to use Regional AWS STS endpoints in the AWS Security blog.

Service endpoints

Region Name Region Endpoint Protocol
US East (Ohio) us-east-2

cloudhsmv2.us-east-2.amazonaws.com

cloudhsmv2.us-east-2.api.aws

HTTPS

HTTPS

US East (N. Virginia) us-east-1

cloudhsmv2.us-east-1.amazonaws.com

cloudhsmv2.us-east-1.api.aws

HTTPS

HTTPS

US West (N. California) us-west-1

cloudhsmv2.us-west-1.amazonaws.com

cloudhsmv2.us-west-1.api.aws

HTTPS

HTTPS

US West (Oregon) us-west-2

cloudhsmv2.us-west-2.amazonaws.com

cloudhsmv2.us-west-2.api.aws

HTTPS

HTTPS

Africa (Cape Town) af-south-1

cloudhsmv2.af-south-1.amazonaws.com

cloudhsmv2.af-south-1.api.aws

HTTPS

HTTPS

Asia Pacific (Hong Kong) ap-east-1

cloudhsmv2.ap-east-1.amazonaws.com

cloudhsmv2.ap-east-1.api.aws

HTTPS

HTTPS

Asia Pacific (Hyderabad) ap-south-2

cloudhsmv2.ap-south-2.amazonaws.com

cloudhsmv2.ap-south-2.api.aws

HTTPS

HTTPS

Asia Pacific (Jakarta) ap-southeast-3

cloudhsmv2.ap-southeast-3.amazonaws.com

cloudhsmv2.ap-southeast-3.api.aws

HTTPS

HTTPS

Asia Pacific (Mumbai) ap-south-1

cloudhsmv2.ap-south-1.amazonaws.com

cloudhsmv2.ap-south-1.api.aws

HTTPS

HTTPS

Asia Pacific (Osaka) ap-northeast-3

cloudhsmv2.ap-northeast-3.amazonaws.com

cloudhsmv2.ap-northeast-3.api.aws

HTTPS

HTTPS

Asia Pacific (Seoul) ap-northeast-2

cloudhsmv2.ap-northeast-2.amazonaws.com

cloudhsmv2.ap-northeast-2.api.aws

HTTPS

HTTPS

Asia Pacific (Singapore) ap-southeast-1

cloudhsmv2.ap-southeast-1.amazonaws.com

cloudhsmv2.ap-southeast-1.api.aws

HTTPS

HTTPS

Asia Pacific (Sydney) ap-southeast-2

cloudhsmv2.ap-southeast-2.amazonaws.com

cloudhsmv2.ap-southeast-2.api.aws

HTTPS

HTTPS

Asia Pacific (Tokyo) ap-northeast-1

cloudhsmv2.ap-northeast-1.amazonaws.com

cloudhsmv2.ap-northeast-1.api.aws

HTTPS

HTTPS

Canada (Central) ca-central-1

cloudhsmv2.ca-central-1.amazonaws.com

cloudhsmv2.ca-central-1.api.aws

HTTPS

HTTPS

Europe (Frankfurt) eu-central-1

cloudhsmv2.eu-central-1.amazonaws.com

cloudhsmv2.eu-central-1.api.aws

HTTPS

HTTPS

Europe (Ireland) eu-west-1

cloudhsmv2.eu-west-1.amazonaws.com

cloudhsmv2.eu-west-1.api.aws

HTTPS

HTTPS

Europe (London) eu-west-2

cloudhsmv2.eu-west-2.amazonaws.com

cloudhsmv2.eu-west-2.api.aws

HTTPS

HTTPS

Europe (Milan) eu-south-1

cloudhsmv2.eu-south-1.amazonaws.com

cloudhsmv2.eu-south-1.api.aws

HTTPS

HTTPS

Europe (Paris) eu-west-3

cloudhsmv2.eu-west-3.amazonaws.com

cloudhsmv2.eu-west-3.api.aws

HTTPS

HTTPS

Europe (Stockholm) eu-north-1

cloudhsmv2.eu-north-1.amazonaws.com

cloudhsmv2.eu-north-1.api.aws

HTTPS

HTTPS

Europe (Zurich) eu-central-2

cloudhsmv2.eu-central-2.amazonaws.com

cloudhsmv2.eu-central-2.api.aws

HTTPS

HTTPS

Israel (Tel Aviv) il-central-1

cloudhsmv2.il-central-1.amazonaws.com

cloudhsmv2.il-central-1.api.aws

HTTPS

HTTPS

Middle East (Bahrain) me-south-1

cloudhsmv2.me-south-1.amazonaws.com

cloudhsmv2.me-south-1.api.aws

HTTPS

HTTPS

Middle East (UAE) me-central-1

cloudhsmv2.me-central-1.amazonaws.com

cloudhsmv2.me-central-1.api.aws

HTTPS

HTTPS

South America (São Paulo) sa-east-1

cloudhsmv2.sa-east-1.amazonaws.com

cloudhsmv2.sa-east-1.api.aws

HTTPS

HTTPS

AWS GovCloud (US-East) us-gov-east-1

cloudhsmv2.us-gov-east-1.amazonaws.com

cloudhsmv2.us-gov-east-1.api.aws

HTTPS

HTTPS

AWS GovCloud (US-West) us-gov-west-1

cloudhsmv2.us-gov-west-1.amazonaws.com

cloudhsmv2.us-gov-west-1.api.aws

HTTPS

HTTPS

Service quotas

Name Default Adjustable Description
Clusters per AWS Region and AWS account Each supported Region: 4 Yes The maximum number of clusters that you can create in this account in the current Region.
HSMs per AWS Region and AWS account Each supported Region: 6 Yes The maximum number of HSMs that you can create in this account in the current Region.
HSMs per CloudHSM cluster Each supported Region: 28 No The maximum number of HSMs that you can create in a CloudHSM cluster.
Keys per CloudHSM cluster Each supported Region: 3,300 No The maximum number of keys that you can create in a CloudHSM cluster.
Length of a Username Each supported Region: 31 No The maximum number of characters for a username.
Length of a password Each supported Region: 32 No The maximum number of characters for a password.
Minimum length of a password Each supported Region: 7 No The minimum number of characters for a password.
Number of concurrent clients Each supported Region: 900 No The maximum number of concurrent clients that can exist in a Region.
Users per CloudHSM cluster Each supported Region: 1,024 No The maximum number of users who can be created on a cluster in an account.

For more information, see Quotas in the AWS CloudHSM User Guide.