CypherCon 2026
FIPS-140 Level 3 encryption is just an API call away
Marko Sluga
Abstract:
What if encrypting sensitive data fields to FIPS 140-2 Level 3 standards was as simple as an API call? In this session, we’ll show you exactly that — using NGINX integrated with AWS Key Management Service (AWS KMS) and a FIPS 140-2 Security Level 3 validated Hardware Security Module (HSM) as the root key store. We’ll dive into how NGINX can enforce field-level encryption on sensitive data — think PII, financial records, healthcare information — as it flows through your infrastructure, with the heavy cryptographic lifting handled seamlessly by KMS. No complex key management headaches, no compromise on compliance. Just powerful, policy-driven field-level encryption, one API call away. The session includes a technology overview, real-world code examples, and a live demo.

Marko Sluga
AWS/Cloud
Marko has +25 years of experience in IT and has been working with cloud security for over a decade.