AWS Private Certificate Authority

No phone app

  • Recognised40% of the score72
  • Phone app26% of the score0
  • Documented20% of the score98
  • Free plan14% of the score0
Free plan
Trial only
Paid plans from
$50/mo
Runs on
api, Web

Summary

AWS Private Certificate Authority is ranked #11 of 18 in public key infrastructure software on Samsung Mobile US Press. It runs on API, Web. There is no free plan. A free trial is offered. Paid plans start at $50/mo.

AWS Private Certificate Authority plans and pricing

All plans
30-day CA operation trial Free First 30 days for the first private CA created in each account and Region CA operation only · Issued certificates still incur charges aws.amazon.com · 4 Oct 2026
Short-lived private certificates $0.06 once Per certificate issued Short-lived certificate mode CA · 1+ certificates aws.amazon.com · 4 Oct 2026
General-purpose private certificates $0.75 once Per certificate issued; calendar-month tiers per Region: 1–1,000 $0.75 each, 1,001–10,000 $0.35 each, 10,001+ $0.001 each General-purpose mode CA aws.amazon.com · 4 Oct 2026
Short-lived certificate mode CA operation $50/mo Per private CA; prorated for partial months Certificates valid up to 7 days · Certificate issuance charged separately aws.amazon.com · 4 Oct 2026
General-purpose mode CA operation $400/mo Per private CA; prorated for partial months Can issue certificates with any validity period · Certificate issuance charged separately aws.amazon.com · 4 Oct 2026

Compared on public key infrastructure software

Free plan
Noaws.amazon.com
Paid from
$50/moaws.amazon.com
Deployment model
cloudaws.amazon.com
SCEP support
Yesaws.amazon.com
HSM integration
Yesaws.amazon.com
Certificate profiles
Yesaws.amazon.com

Facts

Purpose
AWS Private CA is a managed service for issuing and managing private certificates and maintaining an organization's internal PKI.aws.amazon.com · 4 Oct 2026
Resources protected
Certificates can identify and protect servers, applications, users, devices, and containers.aws.amazon.com · 4 Oct 2026
Operating modes
General-purpose mode supports any certificate validity period, while short-lived mode supports certificates valid for up to 7 days.aws.amazon.com · 4 Oct 2026
Automation
Certificate and CA management can be automated using APIs, AWS CLI commands, SDKs, and CloudFormation templates.aws.amazon.com · 4 Oct 2026
CA connectors
The service offers connectors for Active Directory, Kubernetes, and SCEP; the pricing page says these connectors have no additional charge.aws.amazon.com · 4 Oct 2026
Integrations
The SCEP connector can work with mobile device management solutions such as Microsoft Intune and Jamf Pro.aws.amazon.com · 4 Oct 2026
Key protection
AWS Private CA protects CA keys with AWS-managed hardware security modules that adhere to FIPS 140-2 security standards.aws.amazon.com · 4 Oct 2026
Access controls
IAM policies can control who manages certificate authorities and who can issue or revoke certificates.aws.amazon.com · 4 Oct 2026
Revocation
Customers can distribute certificate revocation information using OCSP, certificate revocation lists, or both.aws.amazon.com · 4 Oct 2026
Audit logging
AWS Private CA integrates with CloudTrail, which captures service API calls and can deliver log files to an Amazon S3 bucket.aws.amazon.com · 4 Oct 2026
CA hierarchy limit
AWS Private CA supports a hierarchy up to five tiers deep: a root, three subordinate CA levels, and one issuing CA.aws.amazon.com · 4 Oct 2026
Notable limitation
AWS Private CA does not currently support Merkle Tree Certificates.aws.amazon.com · 4 Oct 2026
Company background
Amazon Web Services says it launched in 2006 and is part of Amazon.aws.amazon.com · 4 Oct 2026
Support agreement
AWS states that AWS Private CA has a service level agreement.aws.amazon.com · 4 Oct 2026

Best AWS Private Certificate Authority alternatives

See all 12

Where it ranks on Samsung Mobile US Press

Is AWS Private Certificate Authority yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources