AWS KMS is a managed service that allows users to create and control the secret keys, which use HSM on the backend.
In this approach, customers do not get a dedicated access to HSM and get something similar to a shared approach. This reduces the cost tremendously followed by the time and efforts spent to manage an HSM appliance.
AWS KMS brings a lot of benefits such as being very simple to use, provides built-in auditing, is low cost, and compliant against various standards, including FIPS 140, PCI DSS, and ISO 27001.
The cost of KMS depends on the API request that is being sent. As of today, the cost is rounded to $0.03 per 10,000 requests. There is no upfront cost, which makes it easily affordable for everyone.
Please check the latest documentation for pricing.
