I said it above, but I&#x27;ll reiterate here that Amazon KMS does not use HSMs; they don&#x27;t provide a lot of detail to help you reason about what that implies for key security. (I agree that there&#x27;s no reason to believe they&#x27;re lying or that it&#x27;s backdoored.) There&#x27;s also not much discussion about where the authorization checks happen, and the security of key operations is only as secure as the entity to whom that is delegated.