Secrets Manager (SSM) charges credential storage fees and API call fees.
SSM is a pay-as-you-go service that billed on a monthly basis. Fees of a month are calculated, billed, and charged on the 3rd to 5th days of the following month.
Note:
SSM uses keys hosted by KMS for encryption, which might incur additional charges. For details, see KMS Billing Overview. Credential Storage Fees
Storing credentials created in SSM generates credential storage fees.
Credential storage fees are calculated by day and billed by month. The number of credentials under an account is used to calculate the daily fees, and the bill is generated by month.
Pricing details:
Item: Credential storage
Price: 0.4 USD/credential/month
Note:
Credential status: Only enabled and disabled credentials are charged.
API Call Fees
SSM API call fees are calculated and billed by month. The accumulated number of API calls is calculated and billed monthly.
Pricing details:
Item: Number of API calls
Price: 0.05 USD/10,000 calls
Note:
If the accumulated number of API calls is below 10,000, it will be rounded up to 10,000 calls.
API calls of each region are calculated separately.
Billing Examples
The example below shows you how the SSM fee is calculated:
A user has created 100 credentials (e.g., database credentials, SSH keys, third-party API keys, and OAuth tokens) in SSM and called each one for 20 times averagely each day, then the SSM fees generated this month are calculated as:
Credential storage fee: 0.4 (USD/credential/month) * 100 = 40 USD
API call fee: 20 (calls) * 100 (credentials) * 30 (days) * 0.05 (USD/10,000 calls) = 0.3 USD
Total: 40 USD + 0.3 USD = 40.3 USD
Was this page helpful?