AWS Key Management Service (KMS) Alternatives (September 2025)

AWS CloudHSM provides total access management control and protection for your encryption keys with secure and compliant hardware security modules (HSMs).

With Box KeySafe, you gain independent control of your encryption keys through our partnership with AWS KMS Key Management Services and AWS CloudHSM.

AWS Secrets Manager allows you to rotate, manage, and retrieve database credentials, API keys, and other secrets through their lifecycle.

Implement customer identity and access management (CIAM) that scales to millions of users with Amazon Cognito, fully managed authentication service.

Amazon Macie is a data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data.

Access management for AWS services and resources. Manage fine-grained permissions and analyze access to refine permissions.

Amazon Web Services offers reliable, scalable, and inexpensive cloud computing services. Free to join, pay only for what you use.

AWS Clean Rooms helps companies and their partners more securely analyze and collaborate on their collective datasets without sharing or copying one another’s underlying data.

The AWS Command Line Interface (CLI) provides a unified tool to manage your AWS services directly from the command line.

AWS Transfer Family enables fully managed support for SFTP, FTPS and FTP to move large amounts of data into AWS.

Learn how customers run Kubernetes on Amazon EKS with detailed case studies and videos.

Use Amazon Managed Blockchain (AMB) to build with Scalable Blockchain Network at scale without any specialized infrastructure investment.

Amazon SQS fully managed message queuing makes it easy to decouple and scale microservices, distributed systems, and serverless applications.

AWS Control Tower provides a single location to set up a well-architected, multi-account environment to govern your AWS workloads with rules for security, operations, and compliance.

AWS IoT Device Defender makes it easier to maintain, manage, and configure security policies for all your IoT devices. Get the tools to identify and respond to security issues.

Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure.

Build your AWS Cloud Skills with AWS Training and Certification. Learn AWS online with free digital training, in-person classroom training, virtual classroom training, and private on-site and virtual training. Learn more!

AWS Artifact provides on-demand access to select security reports, compliance reports, and agreements with AWS.

Amazon SimpleDB is a simple database storage solution that allows developers to simply store & query data items via web services requests, saving time.

AWS Systems Manager is a secure end-to-end management solution for resources on AWS and in multicloud and hybrid environments.

Amazon MSK is a fully managed, secure, and highly available Apache Kafka service that makes it easy to ingest and process streaming data in real time at a low cost.

Centrally manage and maintain control of the encryption keys that protect enterprise data and the secret credentials used to securely access resources.

Unlock fast and scalable search, monitoring, and analysis for log analytics and website search by deploying and running OpenSearch and ALv2 Elasticsearch.

Use AWS Certificate Manager to provision, manage, and deploy public and private SSL/TLS certificates with AWS services and internal connected resources.

Learn more about Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and managed Apache Cassandra compatible database service.

Amazon GuardDuty is a threat detection service that monitors for malicious activity and anomalous behavior to protect AWS accounts, workloads, and data.

Driven by the need for greater productivity, lower costs, and more recently being able to scale a remote workforce, organizations around the world are moving their IT workloads to the cloud. Planning a move to the cloud requires upfront pre-migration planning; this is as important as the implementation itself. But it can be daunting to know where to start or what needs to be in place for a successful migration. The Amazon Web Services (AWS) Cloud Adoption Readiness Tool (CART) can help provide insight into your level of readiness and what you can do to improve it.

Introducing AWS Transfer for SFTP, a fully managed SFTP service for Amazon S3. AWS Transfer for SFTP enables you to easily move your file transfer workloads that use the Secure Shell File Transfer Protocol (SFTP) to AWS without needing to modify your applications or manage any SFTP servers.

AWS VPN establishes encrypted connections for hybrid connectivity networks with AWS Site-to-Site VPN and remote workforce access with AWS Client VPN.

AWS Resource Access Manager helps you securely share your AWS resources with other AWS accounts.

Amazon Elastic Block Store (EBS) is an easy to use, high-performance cloud Storage Area Network (SAN).

AWS CodeCommit is a managed source control repository that makes it easier for teams to securely collaborate on code with contributions encrypted in transit and at rest.

AWS Config is a config tool that helps you assess, audit, and evaluate the configurations and relationships of your resources.

AWS Ground Station is a fully managed service that lets you control satellite communications, downlink and process satellite data, and scale your satellite operations quickly, easily and cost-effectively without having to worry about building or managing your own ground station infrastructure

Amazon GameSparks is a fully managed game backend service that manages and scales your cloud infrastructure.

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that simplifies setup and operation of open-source message brokers on AWS.

Amazon API Gateway helps you build HTTP, REST, and WebSocket APIs with a fully managed service that makes it easy to create, publish, maintain, manage, monitor, and secure APIs.

A fully-managed, cloud-native directory from Amazon Web Services (AWS)

AWS Cost & Usage Reports contains the most comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, and reservations.

AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated remediation.

AWS Lake Formation makes it easier to centrally govern, secure, and globally share data for analytics and machine learning.

Amazon Kinesis Data Streams is a fully managed, serverless data streaming service that stores and ingests various streaming data in real time at any scale.

AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organizations.

AWS IoT Device Management allows you to securely onboard, organize, monitor, and remotely manage IoT devices at scale.

Fully managed Windows file system for business applications.

AWS Shield is a managed DDoS protection service that safeguards applications running on AWS

AWS Batch allows developers, scientists, and engineers to efficiently process hundreds of thousands of batch and machine learning computing jobs on AWS.

AWS App Runner helps you deploy and scale from your source code or container image to a secure web application on AWS.

Thales provides secure data encryption and strong key management to support any enterprise cloud security strategy.

AWS Organizations enables centralized cloud account management as you grow and scale your AWS resources.

Amazon Elastic Container Service (Amazon ECS) provides a fully managed container service solution that’s easy to use, scalable, secure, and reliable.

Amazon CloudFront is a content delivery network (CDN) service that helps you distribute your static and dynamic content quickly and reliably with high speed performance, security, and developer ease-of-use.

AWS License Manager makes it easier for you to manage your software licenses from vendors, such as Microsoft, SAP, Oracle, and IBM, across AWS and on-premises environments.

AWS IoT Core enables secure two-way communication between internet-connected devices and AWS services with device gateway and device SDK capabilities.

IBM Guardium Key Lifecycle Manager centralizes, simplifies and automates encryption key management.

Connect Active Directory to AWS resources or set up a new directory on AWS for your directory-aware workloads.

AWS Budgets is the simplest way to monitor your AWS spend and be alerted when you exceed or are forecasted to exceed your desired spending limit.

The broadest selection of relational and NoSQL purpose-built databases, fully managed, high performance, and ready to scale.

Amazon Relational Database Service (RDS) is a fully managed, open-source cloud database service that allows you to easily operate and scale your relational database of choice, including Amazon Aurora, PostgreSQL, SQL Server, and MySQL.

Amazon Timestream is a fast, scalable, serverless time series database service for Internet of Things (IoT) and operational applications that helps you store and analyze time series data.

Build and test code with automatic scaling, and pay only for the build minutes you use.

AWS Elemental MediaPackage is a video origination and packaging service that securely and reliably delivers streaming content at scale.

Capture, process, and store video streams & media streams for computer vision apps, smart home apps, smart city apps, and real-time video analytics.

Collect streaming data, create a real-time data pipeline, and analyze real-time video and data streams, log analytics, event analytics, and IoT analytics.

Amazon CloudWatch is a monitoring service built for DevOps engineers, developers, site reliability engineers (SREs), IT managers, and product owners.

Amazon Simple Email Service (SES) is a cost-effective, flexible, and scalable email service provider that allows developers to send email from within any application.

AWS IoT lets you securely connect and manage devices, collect and analyze device data, and build and deploy solutions that drive greater business value.

Amazon S3 is cloud object storage with industry-leading scalability, data availability, security, and performance. S3 is ideal for data lakes, mobile applications, backup and restore, archival, IoT devices, ML, AI, and analytics.

Discover the tools that you need to simplify and accelerate your migration and modernization with AWS Migration Hub. Learn more about key benefits and tools.

Amazon Elastic Container Registry (ECR) is a fully managed Docker container registry that makes it easy to store, share, and deploy container images.

The Vormetric Data Security Platform makes it easy and efficient to manage data-at-rest security across your entire organization.

Amazon Kinesis Data Analytics helps you easily build Apache Flink apps, streaming Java apps, and real-time SQL queries to get real-time analytics, clickstream analytics, log analytics, event analytics, and iot analytics.

Amazon Neptune is a fast, fully managed database service powering graph use cases such as identity graphs, knowledge graphs, and fraud detection.

AWS Database Migration Service (DMS) is a highly resilient, secure cloud service that provides database discovery, schema conversion, data migration, and ongoing replication to and from a wide range of databases and analytics systems.

AWS App Mesh is an application networking service mesh that lets you more easily monitor and control communications across services.

AWS Step Functions lets you orchestrate multiple AWS services into serverless workflows so that you can build and update applications quickly.

AWS IoT Events lets you monitor your equipment or device fleets for failures or changes in operation, and trigger actions when such events occur.

AWS CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage AWS and third-party resources.

Amazon Comprehend is a natural-language processing (NLP) service that uses machine learning (ML) to uncover information in unstructured data and text within documents.

Amazon Elastic File System (EFS) provides a simple, scalable fully managed elastic NFS file system for AWS compute instances.

AWS PrivateLink provides private connectivity between VPCs, AWS services, and on-premises applications securely on AWS.

Amazon Textract is a machine learning (ML) service that uses optical character recognition (OCR) to automatically extract text, handwriting, and data from scanned PDF documents, forms, and tables.

AWS Glue is a serverless data integration service that makes it easy to discover, prepare, integrate, and modernize the extract, transform, and load (ETL) process.

PCI compliant Enigma Vault encrypts, tokenizes, and secures cards, plain text, and files. You can safely store and process card data without ever touching it.

The #1 Vault Alternative secures credentials, certificates and keys securely and with ease across multi-cloud environments.

Lit is a key management network for decentralized signing and encryption. Create apps and wallets that use secrets without single points of failure.

AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS cloud costs and usage over time.

With cidaas you create one identity across all channels for convenient & secure authentication ►SSO ►2FA ►Social Login ►Identity & access management

Protect critical company and customer data across all of your clouds. Leverage NetApp ONTAP to enhance data security, encrypt your hybrid cloud and comply with most regulations.

Get in control of your assets with BlueTally, the best Asset Management Software. Powerful one-click integrations and easy-to-use. Try our demo yourself.

Standardize secrets management with identity-based security from Vault that lets you centrally discover, store, access, rotate, and distribute dynamic secrets.

AWS CodeDeploy makes it easier for you to rapidly release new features, avoid downtime during application deployment, and handle the complexity of updating your applications.

Securely store API keys, passwords, certificates, and other sensitive data with Google Cloud’s Secret Manager.

Amazon Comprehend Medical is a a HIPAA-eligible service that uses machine learning to extract health data from medical text.

NOTE: In mid-2019 we re-launched and intensified our efforts, deprecating and archiving the old code base of the AWS Service Operator and changing to a community-driven approach. We’re currently in the design phase and invite you to comment on the design issues and become a contributor to the new project, see details at the new GitHub […]

AWS IAM Identity Center is the AWS solution for connecting your workforce users to AWS managed applications such as Amazon Q Developer and Amazon QuickSight, and other AWS resources. You can connect your existing identity provider and synchronize users and groups from your directory, or create and manage your users directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:

With CyberArk Workforce & Customer Access solutions, organizations can ensure that the right users have secure access to the right resources at the right time.

Cisco Secure Email Encryption Service gives senders enhanced security and reliable controls for traditional email tools.

Amazon Chime lets users meet and chat online, and the Amazon Chime SDK lets developers add audio and video collaboration to their applications.