AWS Key Management Service | Billing

Question 1

Is there a limit to the number of keys I can create in AWS KMS?

Billing

AWS Key Management Service | Security, Identity & Compliance

Answer 1

You can create up to 1000 customer master keys per account per region. As both enabled and disabled customer master keys count towards the limit, we recommend deleting disabled keys that you no longer use. Default master keys created on your behalf for use within supported AWS services do not count against this limit. There is no limit to the number of data keys that can be derived using a master key and used in your application or by AWS services to encrypt data on your behalf. You may request a limit increase for customer master keys by visiting the AWS Support Center.

Question 2

How will I be charged and billed for my use of AWS KMS?

Billing

AWS Key Management Service | Security, Identity & Compliance

Answer 2

With AWS KMS, you pay only for what you use, there is no minimum fee. There are no set-up fees or commitments to begin using the service. At the end of the month, your credit card will automatically be charged for that month’s usage.

You are charged for all customer master keys you create, and for API requests made to the service each month above a free tier.

For current pricing information, please visit the AWS KMS pricing page.

Question 3

Is there a free tier?

Billing

AWS Key Management Service | Security, Identity & Compliance

Answer 3

Yes. With the AWS Free Usage Tier you can get started with AWS KMS for free in all regions. Default master keys created on your behalf are free to store in your account. There is a free tier for usage as well that provides a free number of requests to AWS KMS each month. For current information on pricing, including the free tier, please visit the AWS KMS pricing page.