1.0 Introduction

The following table presents a feature comparison matrix for the Fortanix Cloud Data Control solutions, including Azure Standard and Premium Key Vaults, Amazon Web Services (AWS), and Google Cloud Platform (GCP).

Features	Azure Standard Key Vault	Azure Premium Key Vault	Amazon Web Service (AWS)	Google Cloud Platform	Oracle Cloud Infrastructure (OCI)
Key generation from Fortanix DSM	Yes	Yes	Yes	Yes	NA
Key import from Fortanix DSM	Yes	Yes	Yes	Yes	Yes
Key enable or disable	Yes	Yes	Yes	Yes	Yes
Manual key rotation	Yes	Yes	Yes	Yes	Yes
Key deactivation	Yes	Yes	Yes	NA	NA
Set key expiry date	Yes	Yes	Yes	NA	NA
Delete key from Fortanix DSM If the keys are purged (Azure) If the keys are deleted (AWS)	Yes	Yes	Yes	No (Only supported using destroy API and not DSM UI)	NA
Key rotation using key rotation policy	Yes	Yes	Yes	Yes	Yes
Key rotation policy with rotate copied keys	Yes	Yes	Yes	Yes	Yes
Key rotation policy with deactivate original key	Yes	Yes	NA	NA	NA
Add, update, or delete key tags	Yes	Yes	Yes	NA	Yes
Bring Your Own Key (BYOK)	Yes	Yes	Yes	Yes	Yes
Rotate to Fortanix DSM key	Yes	Yes	Yes	Yes	Yes
Sync keys	Yes	Yes	Yes	Yes	Yes
Schedule key deletion (AWS, OCI) Soft-delete (Azure)	Yes	Yes	Yes	NA	Yes
Cancel key deletion (AWS, OCI) Recover deleted key (Azure)	Yes	Yes	Yes	NA	Yes
Reimport key material	NA	NA	Yes	NA	NA
Delete key material	NA	NA	Yes	NA	NA
Purged deleted key	Yes	Yes	NA	NA	NA
Restored purged key	Yes	Yes	NA	NA	NA
AWS KMS-side key rotation	NA	NA	Yes	NA	NA
Rotate multi-region keys	NA	NA	Yes	NA	NA

What are the supported cloud providers for Datasets in Fortanix CCM?