AWS CloudHSM CLI5.18.0

From a Windows x64 system, AWS CloudHSM CLI lets you send commands to the HSM in an AWS CloudHSM cluster and perform cryptographic work from a terminal. Published by Amazon Web Services, it provides direct command-line access for operating with the HSM rather than relying solely on application-level integrations. Security administrators, developers, and operators can use it to manage HSM-backed keys and carry out signing or verification tasks.

Use of the CLI presumes an AWS CloudHSM cluster to connect to. The current 5.18.0 release adds generation of ML-DSA-44, ML-DSA-65, and ML-DSA-87 key pairs, plus signing and verification with those algorithms. It also supports PureEdDSA using Ed25519 for signing and verification. Key-reference filtering can now select session keys, while improved throttling handling and automatic retry behavior help commands recover from service-rate responses.

AWS CloudHSM CLI is part of Client SDK 5, which is supported for production environments and provides the same components and support level as Client SDK 3. Starting with SDK 5.17, AWS supports up to three earlier minor SDK versions and one year from an SDK version’s release date under its service-level agreement. This makes the CLI suited to interactive administration, cryptographic testing, and operational workflows that need direct control of keys held in an AWS CloudHSM cluster.