AWS CloudHSM customers can now safely delete their CloudHSM backups on-demand, through the AWS SDK and CLI. Backups marked for deletion are held in escrow for a period of 7 days, giving customers a chance to restore their critical key data before it is permanently deleted. Calls to delete and restore backups are recorded in CloudTrail. This feature is available in all CloudHSM regions.