DIDComm v2.1 Mediator is a secure message routing server that enables developers to build decentralised communication systems without managing complex peer-to-peer infrastructure. Using Decentralised Identifiers (DIDs) and the DIDComm v2.1 protocol, it ensures encrypted message exchange with confidentiality, integrity, and trust.
DIDComm v2.1 Mediator is a server that facilitates secure message exchange between parties in decentralised systems. Acting as a secure message router, it allows recipients to fetch messages addressed to their DID while maintaining end-to-end encryption.
Built using the DIDComm v2.1 messaging protocol and Decentralised Identifiers (DIDs), the mediator enables secure, privacy-preserving digital interactions. The protocol utilises public key cryptography to ensure message confidentiality, integrity, and authenticity, thereby establishing trust between senders and receivers without intermediaries compromising the data.
Available on AWS Marketplace, the mediator deploys to your AWS Cloud instance, giving you control over your messaging infrastructure. This solution empowers developers and organisations to:
Implement secure and verifiable peer-to-peer messaging in decentralised systems
Ensure privacy-first communication across applications
Simplify integration of DIDComm v2.1 protocols with ready-to-use mediator services
Scale digital trust solutions without compromising on security or compliance
Whether you are building decentralised apps, trust ecosystems, or secure communication channels,
DIDComm v2.1 Mediator provides the foundation for trusted digital interactions.
Highlights
DIDComm Powered: Built on the DIDComm v2.1 protocol, ensuring interoperability with decentralised ecosystems.
Trust and Authenticity: Every message is cryptographically signed and verifiable, eliminating risks of tampering or impersonation.
Privacy-Preserving: End-to-end encrypted communication with public key cryptography, ensuring messages are only readable by intended recipients.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing bills through a single dimension tied to one instance type, the t4g.micro, charged by the hour. The software itself carries no license fee. You pay only for the hours the underlying compute instance runs. There are no separate tiers, add-ons, or usage-based dimensions to compare. The mediator relays encrypted DIDComm messages between parties, and you can deploy it directly from AWS Marketplace. Because pricing follows a single hourly rate, your cost scales only with how long you keep the instance running.
Top-of-mind questions for buyers
What resource specification do I get with the t4g.micro hourly rate?
The t4g.micro is an AWS instance type built on ARM-based Graviton processors. It is a small compute size suited to light workloads. Because the mediator only forwards sealed encrypted envelopes and stores routing metadata, it runs on modest compute. You pay by the hour for this single instance size.
Am I charged when the instance is stopped or not routing messages?
The software carries no license fee, so you pay only for the hours the t4g.micro instance runs. A fully stopped instance does not accrue running-hour charges. Stopped instances may still incur separate AWS storage fees for attached disk, but the software billing meters running time only.
Does message volume or number of connected parties affect what I pay?
No. Cost depends only on how long the t4g.micro instance runs, not on message count or connected parties. The mediator routes, stores, and forwards encrypted messages without content visibility, but billing tracks instance-hours alone. Higher message traffic does not add usage-based charges under this single hourly dimension.
www.affinidi.com
Helpful?
Vendor refund policy
Not Applicable
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Version: 1.2.0
Release Date: 24th February 2026
Release Notes:
Updated mediator image version to 0.11.4.
Added support for X25519 for DID key-agreement.
Various fixes and improvements.
Additional details
Usage instructions
Template components
CloudFormation template
Usage instructions
Key launch steps to deploy DIDComm v2.1 Mediator by Affinidi:
IAM Roles and Policies:
The provided AWS CloudFormation template provisions the necessary IAM roles and policies to enable secure, scoped access to the AWS services required by the DIDComm Mediator instance.
Specifically, the template includes:
AWS Secrets Manager: Grants permission to retrieve secrets containing Decentralised Identifier (DID) and JSON Web Token (JWT) secrets for authentication and DIDComm messaging.
AWS Systems Manager Parameter Store: Grants permission to read configuration parameters essential for the operation of the DIDComm Mediator, such as mediator DID, DID document, and admin DID.
Amazon CloudWatch: Permissions to create log groups and log streams and write logs for observability.
Amazon Route 53: Scoped access to manage DNS records within a specified hosted zone for subdomain configuration to host the DIDComm Mediator instance.
These permissions are defined in IAM policies attached to roles assumed by the product's compute resources (for example, ECS tasks) during runtime.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.