AWS has already moved TLS connections to services such as KMS, ACM and Secrets Manager to hybrid post-quantum key exchange. That covers the cloud provider’s side. Your applications, VPN tunnels, private PKI, code signing and long-lived signatures stay your responsibility, and so does the vendor software running inside them.

CNSA 2.0 requires quantum-safe algorithms for new US national security system purchases from January 2027, EU member states must submit national PQC plans by the end of 2026, and the UK NCSC expects organizations to finish discovery and planning by 2028. Regulated enterprises outside those mandates are seeing the same dates show up in auditor questions and customer due diligence.

Most migration plans stall at the first step: nobody has a complete picture of where RSA and elliptic curve cryptography sit across cloud workloads, on-premises systems and third parties. Without that picture, sequencing and budgets are estimates.