Key Storage

Each customer master key (CMK) that you create in AWS Key Management Service (KMS) costs ¥6.88/month until you delete it. If you opt-in to have the CMK automatically rotated each year, each newly rotated version will raise the cost of the CMK by ¥6.88/month. You are not charged for the following:

  • Creation and storage of AWS managed CMKs, which are automatically created on your behalf when you first attempt to encrypt data in another AWS service.
  • CMKs that are scheduled for deletion. If you cancel the deletion during the waiting period, the CMK will incur charges as though it was never scheduled for deletion.
  • Data keys, which are created by GenerateDataKey and GenerateDataKeyWithoutPlaintext API requests. You are charged for these API requests per the usage pricing discussed below whether you make these API requests directly or they are made on your behalf by an integrated AWS service. You are not charged an ongoing monthly fee for the data keys themselves as they are neither stored nor managed by KMS.

Key Usage

Each API request to the AWS Key Management Service costs:

  • ¥0.20/ per 10,000 requests 

Pricing examples

Amazon EBS Example

1 CMK used as a master key when creating 250 encrypted EBS volumes per month via the AWS KMS CLI or APIs.

Cost Dimensions:

  • 1 CMK
  • 3 X 250 API requests to create and provision a unique data encryption key for each of 250 volumes
 
Monthly cost:
¥6.88 1 CMK
¥0.015 750 requests (750 requests at ¥0.2 per 10000 API requests)
Total:  
¥6.9/month  

AWS CloudTrail logging

If you enable AWS CloudTrail on your account, you can obtain logs of API calls made to or by AWS KMS. See the AWS CloudTrail pricing page for more information.

Product-Page_Standard-Icons_01_Product-Features_SqInk
Learn how to get started

Find links to our developer's guide, helpful videos, and console guides.

Learn more 
Product-Page_Standard-Icons_02_Sign-Up_SqInk
Sign up for a free account

Instantly get access to the AWS Free Tier. 

Sign up 
Product-Page_Standard-Icons_03_Start-Building_SqInk
Start building in the console

Get started building with AWS Key Management Service in the AWS Console.

Sign in