The service may be configured to perform cryptographic operations with keys held in a key manager outside the provider's infrastructure, so that the user retains sole custody of the key material. Where a provider lacks this, key material custody cannot be kept outside the provider.
External Key Store
CCC.KeyMgmt.CP27
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH09 | External Key Store is Unavailable or Compromised | When keys are held in an external key manager, every encrypt and decrypt request depends on a network path to, and the correct operation of, infrastructure outside the provider. Loss of that path or of the external system halts all operations with those keys, and compromise of the external system exposes the key material or the plaintext data keys that pass through it. Availability of every workload that depends on the keys and confidentiality of the data they protect are affected. |