A very insightful post on the threat modelling of AWS KMS including CloudHSM, HYOK deployments and various key management approaches: AWS KMS Threat Model
------------------------------
Thanos Vrachnos OffensiveOps | PKI & eID Subject-matter Expert
SPEARIT
Thessaloniki, Greece
------------------------------