Security & identity
AWS Private Certificate Authority
- Timebilled
- Bytesnot billed
- Callsbilled
In one line
You rent the CA by the month even when it issues nothing, and pay again per certificate.
What gets missed
The monthly CA fee starts at creation. Delete a CA and restore it inside the 7-to-30-day window and you are billed for the gap. Short-lived certificate mode costs a fraction of general-purpose mode.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
PaidPrivateCAPrivateCertificatesIssuedShortLivedCertificatesIssuedOCSPPerQuery
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.