buyers typically pay for secrets storage, API usage, and encryption management. The main cost drivers are the number of secrets, API call volume, and the use of AWS Key Management Service keys for encryption. This article provides practical price ranges in USD to help with budgeting and planning.
| Item | Low | Average | High | Notes |
|---|---|---|---|---|
| Secrets | $0.25/mo | $0.40/mo | $0.60/mo | Per stored secret per month; volume discounts may apply with high counts |
| API Calls | $0.04/10k requests | $0.05/10k requests | $0.06/10k requests | Counts include GetSecretValue, CreateSecret, etc. |
| KMS Keys | $0.90/mo per key | $1.00/mo per key | $1.50/mo per key | CMKs used to encrypt secrets; regional pricing varies |
| KMS API Requests | $0.003/10k requests | $0.003/10k requests | $0.003/10k requests | Encryption/Decryption and key management calls |
| Rotation (optional) | $0.00 | $0.00–$0.10/mo | $0.20/mo | Depends on rotation configuration and rotation Lambda usage |
| Totals (per month, 5 secrets, moderate API usage) | $2.40 | $3.20 | $4.80 | Assumes 5 secrets, mid API activity, single KMS key |
Assumptions: region, secret count, secret rotation, and API traffic vary; estimates shown are for common U.S. regions and typical usage.
Overview Of Costs
Cost landscape summarized: The monthly price for AWS Secrets Manager centers on three anchors—secret storage, API call volume, and encryption key management. Each secret adds a recurring line item, while routine API calls accumulate costs over time. If a customer enables rotation, there may be additional modest charges tied to rotation automation and Lambda invocations. Assumptions: region, specs, labor hours.
Cost Breakdown
| Component | Low | Average | High | Notes |
|---|---|---|---|---|
| Secrets | $0.25/mo | $0.40/mo | $0.60/mo | Per secret stored per month |
| API Calls | $0.04/10k | $0.05/10k | $0.06/10k | Includes get, create, list, rotate calls |
| KMS Keys | $0.90/mo | $1.00/mo | $1.50/mo | CMK management for encryption of secrets |
| KMS API Requests | $0.003/10k | $0.003/10k | $0.003/10k | Encrypt/decrypt and key usage calls |
| Rotation (optional) | $0.00 | $0.05/mo | $0.20/mo | Depends on rotation method and Lambda usage |
| Taxes & Fees | $0.00 | $0.00 | $0.15/mo | Local or regional add-ons may apply |
What Drives Price
Primary price factors include the number of secrets, the frequency of API requests, and the use of KMS CMKs for encryption. High secret churn or heavy automation increases monthly costs. Seasonality or project ramps can shift API volumes, changing the mix of storage versus API demand. data-formula=”secret_count × secret_price + api_calls × api_price + kms_keys × kms_price”>
Regions And Market Variations
Regional differences exist for Secrets Manager pricing across the United States. Urban centers typically align with the documented US East/West pricing, while more remote regions may exhibit minor delta plus or minus a few percentage points. For budgeting, plan with a regional delta of roughly ±10% on secret counts and API volumes.
Labor, Time, And Setup
Operational costs are usually in the form of setup effort, secret planning, and automation scripts rather than ongoing labor. If a deployed architecture uses rotation via Lambda, include the function’s invocation cost as part of the monthly total. For teams migrating from another secret store, initial configuration can involve higher one‑time costs, then settles into steady-state usage.
Hidden And Additional Costs
Possible extras include data transfer charges between AWS regions if secrets are retrieved across regions, and additional encryption keys for separate environments (dev, test, prod). If a customer stores large secrets or binary data, verify storage limits per secret and any per‑secret quotas that could indirectly affect pricing.
Pricing Scenarios And Real‑World Snapshots
Scenario planning helps compare options and keeps budgets aligned with usage patterns. The following cards illustrate typical configurations and costs.
-
Basic Setup: 2 secrets, moderate API calls, 1 CMK.
- Secrets: $0.40/mo × 2 = $0.80
- API: 20k requests/mo at $0.05/10k = $0.10
- KMS: $1.00/mo
- KMS API: 20k calls at $0.003/10k = $0.006
- Rotation: none
- Estimated monthly total: $1.92
-
Mid‑Range Production: 6 secrets, higher API usage, 2 CMKs with rotation enabled
- Secrets: $0.40 × 6 = $2.40
- API: 100k requests/mo at $0.05/10k = $0.50
- KMS: $2.00/mo
- KMS API: 100k calls ≈ $0.03
- Rotation: $0.08/mo
- Estimated monthly total: $5.01
-
Premium Enterprise: 20 secrets, high API load, 3 CMKs with advanced rotation
- Secrets: $0.60 × 20 = $12.00
- API: 500k requests/mo at $0.05/10k = $2.50
- KMS: $3.00/mo
- KMS API: 500k calls ≈ $0.15
- Rotation: $0.15/mo
- Estimated monthly total: $17.80
Assumptions: region, secret counts, and API volumes drive variability; consider separate environment budgets for dev/test and prod.