Security & identity
AWS Secrets Manager
- Timebilled
- Bytesnot billed
- Callsbilled
In one line
Storing a secret costs a flat monthly fee. Reading it costs a little more each time.
What gets missed
Uncached GetSecretValue on every request is the usual blowup. Rotation Lambdas and any customer-managed KMS key bill on their own meters, and the per-secret fee runs whether the secret is read or not.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
AWSSecretsManager-SecretsAWSSecretsManagerAPIRequest
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.