AWS Key Management Service

AWS Key Management Service is ranked #10 of 16 in encryption key management software on The Geeks Club. It runs on API, Web. Paid plans start at $1/mo.

AWS Key Management Service plans and pricing

All plans

AWS KMS $1/mo $1/month (prorated hourly) per KMS key; API requests are charged separately 20,000 requests/month free tier across Regions; asymmetric-key requests and specified key-pair operations are excluded aws.amazon.com · 29 Sept 2026

Compared on encryption key management software

Free plan: No
Paid from: $1/mo
Deployment model: cloud
Key audit logs: Yes

Best AWS Key Management Service alternatives

See all 12

7.8 Thales CipherTrust Data Security Platform Free plan

7.0 Oracle Cloud Infrastructure Secret Management Free plan

6.8 Fornetix VaultCore Free trial 6.7 Entrust Certificate Manager

6.6 CrystalKey 360

6.6 OpenStack Barbican Free plan

AWS Key Management Service

Purpose: AWS KMS creates and controls cryptographic keys used to encrypt data and digitally sign it.
Key management: KMS provides centralized control over key lifecycles and permissions, including separate control over who manages keys and who uses them.
Cryptographic operations: KMS supports symmetric encryption, asymmetric signing or encryption key pairs, and generation and verification of HMACs.
Application libraries: The AWS Encryption SDK supports KMS as a key provider for encrypting and decrypting data locally in applications.
Integrations: KMS integrates with AWS services including Amazon S3, Amazon EBS, Amazon RDS, Amazon DynamoDB, AWS Lambda, and AWS CloudTrail.
Auditing: When CloudTrail is enabled, KMS requests are recorded with details such as the user, time, API action, and key used.
Key protection: KMS uses hardware security modules validated to FIPS 140-3 Security Level 3 to protect key material and cryptographic operations.
Plaintext keys: AWS states that plaintext keys are never written to disk and are used only in HSM volatile memory for the requested cryptographic operation.
Compliance: AWS lists KMS validations or certifications including SOC 1, SOC 2, SOC 3, PCI DSS Level 1, FedRAMP, HIPAA, and FIPS 140-3.
Multi-Region keys: Multi-Region keys share key material and key IDs across Regions and can support cross-Region workflows such as disaster recovery.
External key stores: With an external key store, keys are generated and stored in an external key manager that the customer owns and manages, and key material stays in that HSM.
Custom key store limits: Custom key stores are unavailable in the AWS China (Beijing) and AWS China (Ningxia) Regions and do not support asymmetric KMS keys.
Scaling and limits: KMS automatically scales as encryption needs grow, has default limits for key counts and request rates, and allows customers to request higher limits.
Pricing exclusions: AWS-managed and AWS-owned key creation and storage are not charged, but API requests to AWS-managed keys are chargeable.
Price from: $1/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best Encryption Key Management Software in 2026#10 of 16
Best Key Management Software in 2026#9 of 16

Is AWS Key Management Service yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote AWS Key Management Service

Sources

aws.amazon.com/kms/· checked 29 Sept 2026
aws.amazon.com/kms/features/· checked 29 Sept 2026
aws.amazon.com/kms/pricing/· checked 29 Sept 2026