Good point regarding the outcome of an attack.<p>&gt; If Amazon is a bad actor they trivially have access to the HSM because they could just write some software that pretends to be the HSM.<p>I believe SafeNet HSMs protect against attacks of this nature.