AWS Key Management Service vs Fortanix Data Security Manager

AWS Key Management Service creates and controls cryptographic keys for data encryption and digital signatures. It centralizes key lifecycles and permissions, including separate control over administrators and key users. KMS supports symmetric encryption, asymmetric signing or encryption pairs, and HMAC generation and verification. The AWS Encryption SDK can use KMS as a key provider for local application encryption and decryption. Integrations include Amazon S3, EBS, RDS, DynamoDB, Lambda, and CloudTrail. With CloudTrail enabled, requests can record the user, time, API action, and key. AWS says hardware security modules validated to FIPS 140-3 Security Level 3 protect key material and operations, with plaintext keys kept only in volatile HSM memory. Multi-Region keys support cross-Region workflows; external key stores keep material in a customer-managed external manager. KMS scales with demand but has default key and request limits. The listed plan is $1 a month per KMS key, prorated hourly.

Fortanix Data Security Manager (DSM) gives DevOps and security teams a way to manage secrets, credentials, certificates, API keys and tokens outside source code. Secrets management can run on-premises, in the cloud, or across hybrid and multicloud environments. DSM provides REST APIs and supports standards and technologies including OAuth, OpenID (SAML), LDAP, JWT, PKI, Kubernetes and Docker.

Documented CI/CD integrations include HashiCorp Vault, Kubernetes Secret Store CSI Driver, Ansible, Jenkins, GitHub, GitLab, CyberArk, Delinea and Azure DevOps. Fortanix says the service stores secrets in a FIPS 140-2 Level 3 certified HSM and uses Intel SGX and Runtime Encryption technology. Role-based access controls, safeguards against unauthorized password changes, simultaneous-login alerts and audit logs support access oversight. Listed certifications include FIPS 140-2 Level 3, PCI-DSS, ISO 27001, CIS and SOC 2 Type 2. The DSM SaaS trial includes the full feature set for 30 days at free, with no credit card required to start. No numeric Enterprise price is listed.