is a dedicated hardware device, running in the VPC used to generate and use your own encryption keys.

Since it is single tenant ( an hardware device just for you ) it provide extra levels of security.

offload SSL/TLS processing from your web servers

protect private keys for issuing certificate authorities

store the master key for Oracle DB Transparent Data Encryption