AWS Certificate Manager Pricing

Public SSL/TLS certificates provisioned through AWS Certificate Manager are free. You pay only for the AWS resources you create to run your application.

AWS Certificate Manager Private Certificate Authority Pricing

ACM Private Certificate Authority (CA) is priced along two dimensions. You pay a monthly fee for the operation of each private CA until you delete it and you pay for the private certificates you issue each month.

Private Certificate Authority Operation

$400 per month for each ACM private CA until you delete the CA.
ACM Private CA operation is pro-rated for partial months based on when you create and delete the CA. You are not charged for a private CA after you delete it. However, if you restore a deleted CA, you are charged for the time between deleting it and restoring it.

Private Certificates

You pay for certificates issued from your ACM Private CA for which you have access to the private key. This includes private certificates you create in ACM and export and certificates for which you create the private key yourself without using ACM for certificate management.

Private certificates issued from ACM Private CA for which you do not have access to the private key are free. These include certificates used exclusively with ACM-integrated services, such as Elastic Load Balancing, Amazon CloudFront, and Amazon API Gateway.

Certificate pricing tiers are based on the number of new certificates created in the calendar month and calculated per region (as indicated in the table below).

ACM Private CA 30-day Free Trial

30-day trial

Any new account to ACM Private CA can try the service for 30 days with no charge for operation of the first private CA created in the account. You pay for the certificates you issue during the trial period.

Start a free trial of ACM Private CA

Number of private certificates created in the month/per Region	Price (per certificate)
1 - 1,000	$0.75
1,001 - 10,000	$0.35
10,001 and above	$0.001

Pricing Examples for ACM Private Certificate Authority (monthly)

Example 1: One Region

Two Private CAs issue 20,000 certificates in US East (Northern Virginia)

Monthly charges

2 x $400 (monthly CA operation)

+ 1,000 x $0.75 (first 1,000 certificates)

+ 9,000 x $0.35 (next 1,001 up to 10,000 certificates)

+ 10,000 x $0.001 (above 10,000 certificates)

= $4,710/month

Example 2: Two Regions

One Private CA in US East (N. Virginia) issues 500 certificates and one Private CA in US West (Oregon) issues 500 certificates.

Monthly charges

2 x $400 (monthly CA operation)

+ 500 x $0.75 first 1,000 certificates in US East (N. Virginia)

+ 500 x $0.75 first 1,000 certificates in US West (Oregon)

= $1,550/month

Example 3: Combination of Free and Paid

One Private CA in US East (N. Virginia) issues a total of 5,000 new certificates each month in US East (Northern Virginia). Of the 5,000 issued, you use 1,000 with ACM-integrated services, such as Elastic Load Balancing or API Gateway. You are not charged for these certificates. Of the 4,000 remaining, you export 2,000 from ACM and you issue 2,000 from your Private CA by creating the private key yourself without using ACM for certificate management. You are charged for these because you have access to the private key.

Monthly charges

1 x $400 (monthly CA operation)

+ $0 (no charge) for 1,000 certificates issued and used with ACM-integrated services

+ 1,000 x $0.75 (first 1,000 certificates)

+ 3,000 x $0.35 (next 1,001 up to 10,000 certificates)

= $2,200/month