AWS KMS Pricing Calculator - Keys, Requests & CloudHSM
AWS KMS pricing calculator for customer-managed keys, API requests, and CloudHSM instances. Estimate monthly costs for symmetric encryption, asymmetric operations, key storage across all AWS regions.
Reference pricesExample monthly cost in US East (N. Virginia)
20 customer managed keys with standard key storage and 10 million symmetric requests per month, priced by this calculator at AWS list prices.
Estimated total: $50.00 per month
| Breakdown | Monthly cost |
|---|---|
| API Requests (Symmetric Operations) | $30.00 |
| ↳ 10M @ $0.03/10K | $30.00 |
| Key Storage (20 keys) | $20.00 |
| ↳ 20 @ $1.00/key/month | $20.00 |
Priced on 15 Oct 2026 from CloudBurn's AWS price data. Prices in USD, excluding tax.
Free price alerts · Platform launching early 2027
Get an email when KMS prices change
CloudBurn re-checks AWS prices every week and emails you when a price behind this calculator changes.
30% founding-member discount
Only waitlist members get it. Join now and keep 30% off for as long as you keep your plan.
Alert emails only arrive when a price changes; the waitlist sends two a month at most. Unsubscribe anytime. Privacy policy
Tick the box to also save your spot on CloudBurn Platform:
- Price your whole stack in minutesThe AWS Simple Pricing Calculator puts KMS and the rest of your AWS services in one estimate, ready to export.
- Know the cost before you deployThe GitHub App estimates what your Terraform, CDK or CloudFormation changes will cost before they ship.
- Find the waste, then fix itScans of your live AWS accounts show what is costing money for nothing, with clear steps to fix each finding, including checks for KMS.
Frequently Asked Questions
What are the different KMS request types and their costs?
KMS has five pricing tiers for API requests (per 10,000 requests): Symmetric operations ($0.03) for Encrypt, Decrypt, GenerateDataKey; RSA 2048 operations ($0.03); Other asymmetric ($0.15); ECC GenerateDataKeyPair ($0.10); and RSA GenerateDataKeyPair ($12.00).
How much does KMS key storage cost?
Customer-managed keys (CMKs) cost $1.00/month each, prorated hourly. AWS-managed keys are free. If you store keys in CloudHSM or External Key Store (XKS), there's an additional $1.00/key/month charge on top of the base key storage cost.
When should I use CloudHSM with KMS?
Use CloudHSM custom key stores when you need dedicated, single-tenant HSMs for regulatory compliance. Each CloudHSM instance costs $1.60/hour (~$1,168/month for 24/7). AWS recommends at least 2 HSMs for high availability.
Should I use symmetric or asymmetric keys?
Symmetric keys (AES-256) are cheaper ($0.03/10K) and faster for encryption/decryption. Asymmetric keys (RSA, ECC) are needed for digital signatures, code signing, or when you need to share the public key externally.
Why is RSA GenerateDataKeyPair so expensive?
RSA GenerateDataKeyPair costs $12.00/10K requests because generating RSA key pairs is computationally intensive. Consider alternatives like ECC GenerateDataKeyPair ($0.10/10K) or symmetric envelope encryption when possible.
Does key rotation cost extra?
Automatic key rotation adds $1.00/month for the first two rotations. This is in addition to the base $1.00/month key storage cost.
Related tools