AWS KMS: Multi-Tenants, shared hardware; only for symmetric keys

AWS CloudHSM: Dedicated hardware; FIPS 140-2 Compliance; Both symmetric and asymmetric keys