Skip to content
inetGeek

AWS Secrets Manager pricing and limits

iScore76–89 · ≈#3/3
aws.amazon.com/secrets-manager · Secrets management
SEPT 2026 audit

AWS-native secrets store billed per secret per month plus per API call, integrated with IAM, Lambda and RDS.

Visit AWS Secrets Manager documentation
Compare AWS Secrets Manager with

No affiliate links, sponsored placements or paid rankings appear on this site. Ordering follows the sourced data and the stated criteria.

Entry paid plan$0.40 per secret per month, plus $0.05 per 10,000 API calls.
Regions34 commercial AWS Regions plus 2 AWS GovCloud (US) Regions listed in the Secrets Manager service endpoints table.
Free tierNo
CategorySecrets management

Reviewed by Palash BagchiUpdated 19 criteria comparedSources last checked

AWS Secrets Manager pricing at a glance

Entry paid plan
$0.40 per secret per month, plus $0.05 per 10,000 API calls source ↗
Pricing model
Per-secret monthly fee plus metered API calls source ↗
What the free plan includes
Up to $200 of AWS Free Tier credits for new customers, and a free plan chosen at sign-up that lasts 6 months source ↗
When the free offer ends
6 months after account creation; Free Tier credits expire 12 months after that date source ↗

First line of each sourced value. The full text is in AWS Secrets Manager pricing below. How this free offer stacks up: cloud free tiers compared.

01.Evaluation guide

Who it suits

Teams already deep in AWS IAM, Lambda and RDS — the integration is native rather than bolted on, and the per-secret price is simple to reason about.

Consider something else if…

Secrets sprawl across many small values rather than a few large ones — at $0.40/secret/month, a service charging per identity or per seat instead can work out cheaper for a team with a handful of engineers and hundreds of individual secrets.

Editorial · Palash Bagchi · approved

Each value below links to the page it was read from, with the sentence it came from. Criteria AWS Secrets Manager does not publish are not listed.

AWS Secrets Manager pricing

6 criteria
Free tierNo
Sources (1) →
  • AWS Secrets Manager Pricing ↗

    “Starting July 15, 2025, new AWS customers will receive up to $200 in AWS Free Tier credits, which can be applied towards eligible AWS services, including Secrets Manager.”

    Read 2026-09-13 · official pricing · Report a correction

Kind of free offerIntroductory free tier
Sources (1) →
What the free plan includesUp to $200 of AWS Free Tier credits for new customers, and a free plan chosen at sign-up that lasts 6 months. Neither is a standing Secrets Manager allowance.
Sources (1) →
When the free offer ends6 months after account creation; Free Tier credits expire 12 months after that date.
Sources (1) →
  • AWS Secrets Manager Pricing ↗

    “The free plan will be available for 6 months after account creation. [...] All Free Tier credits must be used within 12 months of your account creation date.”

    Read 2026-09-13 · official pricing · Report a correction

Entry paid plan$0.40 per secret per month, plus $0.05 per 10,000 API calls.
Sources (1) →
Pricing modelPer-secret monthly fee plus metered API calls. Rotating a secret creates a new version but is not separately charged beyond the API calls it makes.
Sources (1) →

Infrastructure

2 criteria
Regions34 commercial AWS Regions plus 2 AWS GovCloud (US) Regions listed in the Secrets Manager service endpoints table.
Sources (1) →
Uptime SLA99.99% monthly uptime, one figure with no configuration split.
Sources (1) →

Auth

1 criteria
Audit logsAWS CloudTrail records every Secrets Manager API call as an event; the last 90 days are viewable in the CloudTrail console, longer retention by creating a trail that delivers to S3.
Sources (1) →

Secrets

1 criteria
Secret versioningSupported — rotating a secret automatically creates a new version, at no additional per-secret charge.
Sources (1) →

Compliance

9 criteria
SOC 2Listed as SOC-compliant on AWS's own compliance scope page.
Sources (1) →
  • AWS Services in Scope — SOC ↗

    “This webpage provides a list of AWS Services in Scope of AWS assurance programs. [...] AWS Secrets Manager ✓ AWS Security Hub CSPM ✓ AWS Serverless Application Repository ✓ AWS”

    Read 2026-09-13 · official site · Report a correction

ISO 27001Certified for ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018 and ISO 9001; Secrets Manager is named in AWS's per-service compliance list.
Sources (1) →
HIPAAListed as a HIPAA-eligible service on AWS's own reference page.
Sources (1) →
  • HIPAA Eligible Services Reference — AWS ↗

    “The services listed below are eligible to create, receive, process, maintain, or transmit electronic protected health information (ePHI). [...] AWS Secrets Manager AWS Security Hub CSPM (formerly AWS Security Hub) AWS Service Catalog AWS”

    Read 2026-09-13 · official site · Report a correction

GDPR / data residencyCustomers choose the geographic Region their data is stored in; AWS states all AWS services can process personal data in compliance with the GDPR. AWS-wide GDPR statement, not a Secrets Manager-specific page.
Sources (1) →
  • GDPR - Amazon Web Services (AWS) ↗

    “AWS customers can use all AWS services to process personal data (as defined in the GDPR) that is uploaded to the AWS services under their AWS accounts (customer data) in compliance with the GDPR [...] Determine where their customer data will be stored, including the type of storage and geographic region of that storage.”

    Read 2026-09-13 · official site · Report a correction

PCI DSSAttestation of Compliance for PCI DSS version 3.2 at Service Provider Level 1; can be used for cardholder-data workloads.
Sources (1) →
Encryption at restEnvelope encryption: each secret value is encrypted with a unique 256-bit AES data key, itself encrypted under an AWS KMS key.
Sources (1) →
Customer-managed keysAny symmetric-encryption customer managed KMS key in the same account and Region can encrypt a secret, instead of the aws/secretsmanager AWS managed key. Asymmetric KMS keys are not supported; keys are chosen per secret.
Sources (1) →
Role-based access controlIAM identity-based and resource-based policies define who can take which actions on which secrets; attribute-based access control (ABAC) is also supported.
Sources (1) →
Private networking / VPCInterface VPC endpoints powered by AWS PrivateLink reach the Secrets Manager API with no internet gateway; traffic does not leave the AWS network.
Sources (1) →

When these numbers change, hear about it. Sources are re-checked monthly; a repricing goes out as a short note.

Confirm by email; unsubscribe from any issue. Your address goes to Kit and nowhere else — what we do with it.

AWS Secrets Manager pricing questions

How much does AWS Secrets Manager cost?

$0.40 per secret per month, plus $0.05 per 10,000 API calls.

AWS Secrets Manager Pricing · read

How does AWS Secrets Manager charge?

Per-secret monthly fee plus metered API calls. Rotating a secret creates a new version but is not separately charged beyond the API calls it makes.

AWS Secrets Manager Pricing · read

Does AWS Secrets Manager have a free tier?

No free tier; the free offer is a introductory free tier.

AWS Secrets Manager Pricing · read

Does the AWS Secrets Manager free offer expire?

6 months after account creation; Free Tier credits expire 12 months after that date.

AWS Secrets Manager Pricing · read

What uptime does AWS Secrets Manager guarantee?

99.99% monthly uptime, one figure with no configuration split.

AWS Secrets Manager Service Level Agreement · read

Compare AWS Secrets Manager withAll alternatives, ranked →
AWS Secrets Manager vs Doppler
AWS Secrets Manager vs Infisical

Comments

Every page here is sourced and dated.