Tech riderRev. 4 Oct 2026
AWS Private Certificate Authority
- 1Runs onAPI, Web
- 2Costsfree trial · paid from $50/mo
- 3Deployment modelcloud
- 4SCEP supportYes
- 5HSM integrationYes
- 6Certificate profilesYes
6 lines stated Written from the maker's own pages: aws.amazon.com
Overview
AWS Private Certificate Authority is ranked #12 of 25 in public key infrastructure software on Specifiction. It runs on API, Web. There is no free plan. A free trial is offered. Paid plans start at $50/mo.
AWS Private Certificate Authority plans and pricing
All plans30-day CA operation trial Free First 30 days for the first private CA created in each account and Region CA operation only · Issued certificates still incur charges aws.amazon.com · 4 Oct 2026
Short-lived private certificates $0.06 once Per certificate issued Short-lived certificate mode CA · 1+ certificates aws.amazon.com · 4 Oct 2026
General-purpose private certificates $0.75 once Per certificate issued; calendar-month tiers per Region: 1–1,000 $0.75 each, 1,001–10,000 $0.35 each, 10,001+ $0.001 each General-purpose mode CA aws.amazon.com · 4 Oct 2026
Short-lived certificate mode CA operation $50/mo Per private CA; prorated for partial months Certificates valid up to 7 days · Certificate issuance charged separately aws.amazon.com · 4 Oct 2026
General-purpose mode CA operation $400/mo Per private CA; prorated for partial months Can issue certificates with any validity period · Certificate issuance charged separately aws.amazon.com · 4 Oct 2026
Compared on public key infrastructure software
- Free plan
- Noaws.amazon.com
- Paid from
- $50/moaws.amazon.com
- Deployment model
- cloudaws.amazon.com
- SCEP support
- Yesaws.amazon.com
- HSM integration
- Yesaws.amazon.com
- Certificate profiles
- Yesaws.amazon.com
Facts
- Purpose
- AWS Private CA is a managed service for issuing and managing private certificates and maintaining an organization's internal PKI.aws.amazon.com · 4 Oct 2026
- Resources protected
- Certificates can identify and protect servers, applications, users, devices, and containers.aws.amazon.com · 4 Oct 2026
- Operating modes
- General-purpose mode supports any certificate validity period, while short-lived mode supports certificates valid for up to 7 days.aws.amazon.com · 4 Oct 2026
- Automation
- Certificate and CA management can be automated using APIs, AWS CLI commands, SDKs, and CloudFormation templates.aws.amazon.com · 4 Oct 2026
- CA connectors
- The service offers connectors for Active Directory, Kubernetes, and SCEP; the pricing page says these connectors have no additional charge.aws.amazon.com · 4 Oct 2026
- Integrations
- The SCEP connector can work with mobile device management solutions such as Microsoft Intune and Jamf Pro.aws.amazon.com · 4 Oct 2026
- Key protection
- AWS Private CA protects CA keys with AWS-managed hardware security modules that adhere to FIPS 140-2 security standards.aws.amazon.com · 4 Oct 2026
- Access controls
- IAM policies can control who manages certificate authorities and who can issue or revoke certificates.aws.amazon.com · 4 Oct 2026
- Revocation
- Customers can distribute certificate revocation information using OCSP, certificate revocation lists, or both.aws.amazon.com · 4 Oct 2026
- Audit logging
- AWS Private CA integrates with CloudTrail, which captures service API calls and can deliver log files to an Amazon S3 bucket.aws.amazon.com · 4 Oct 2026
- CA hierarchy limit
- AWS Private CA supports a hierarchy up to five tiers deep: a root, three subordinate CA levels, and one issuing CA.aws.amazon.com · 4 Oct 2026
- Notable limitation
- AWS Private CA does not currently support Merkle Tree Certificates.aws.amazon.com · 4 Oct 2026
- Company background
- Amazon Web Services says it launched in 2006 and is part of Amazon.aws.amazon.com · 4 Oct 2026
- Support agreement
- AWS states that AWS Private CA has a service level agreement.aws.amazon.com · 4 Oct 2026
Best AWS Private Certificate Authority alternatives
See all 20 All accessCh 01 EZCA Free trialAndroidAPI from $200/mo7.7 All accessCh 02 KeyTalk CKMS Free trialAndroidiOS from €5/mo7.4 All accessCh 03 SecureW2 Cloud NAC AndroidAPI 7.4 All accessCh 04 step-ca Free planAPILinux Free to start7.3 All accessCh 05 OpenCA PKI Free planLinuxMac Free to start7.2 All accessCh 06 OpenXPKI Free planAPILinux Free to start7.1
Where it ranks on Specifiction
Is AWS Private Certificate Authority yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- aws.amazon.com/private-ca/faqs/· checked 4 Oct 2026
- aws.amazon.com/private-ca/features/· checked 4 Oct 2026
- aws.amazon.com/private-ca/pricing/· checked 4 Oct 2026
- aws.amazon.com/about-aws/· checked 4 Oct 2026