Side by side
Alibaba Cloud Key Management Service vs AWS Key Management Service
Both stand on key management software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Choose Alibaba Cloud Key Management Service if you need cloud key management with customer-managed keys, rotation, audit logs, or HSM-backed keys. Default keys cover server-side encryption for Alibaba Cloud services at no charge. Look elsewhere if your chosen instance needs secrets or data keys, since both listed instance plans include zero of each.
Visit Alibaba Cloud Key Management Service
AWS KMS combines centralized key controls with multiple cryptographic operations and AWS service integrations. Account for per-key charges, separately billed API requests, and default limits when planning usage.
Visit AWS Key Management ServiceThe facts
| Alibaba Cloud Key Management Service | AWS Key Management Service | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Web | API, Web |
| Lowest paid plan | See the plans | AWS KMS: $1 a month |
| Plans published | 3 | 1 |
| Maker | Not published | Not published |
| Website | alibabacloud.com | aws.amazon.com |
| On key management software | #5 of 25 | #1 of 25 |
Alibaba Cloud Key Management Service: what it does well
- Default keys are provided at no charge for Alibaba Cloud service encryption.
- Supports customer-managed keys and key import.
- Automatic key rotation and audit logs are available.
- HSM-backed keys are supported.
- Software and hardware instance options are offered.
What to know first
- Software instance includes 0 secrets and 0 data keys.
- Hardware instance includes 0 secrets and 0 data keys.
- Software Key Management Instance costs $500 a month.
- Hardware Key Management Instance costs $1,799 a month.
AWS Key Management Service: what it does well
- Supports symmetric, asymmetric, and HMAC operations.
- Integrates with several AWS services.
- CloudTrail can record key requests and related details.
- Uses HSMs validated to FIPS 140-3 Security Level 3.
What to know first
- API requests are charged separately from key costs.
- Custom key stores are unavailable in two AWS China Regions.
- Custom key stores do not support asymmetric KMS keys.
- Default key and request limits apply.
Alternatives to Alibaba Cloud Key Management Service Alternatives to AWS Key Management Service The whole list