Cloud Key Management Service pricing
This page describes the pricing information for Cloud KMS. Prices are effective March 21, 2022.
Cloud Key Management Service charges for usage based on the following price sheet. A bill is sent out at the end of each billing cycle, listing previous usage and charges. Prices on this page are listed in US dollars (USD).
If you pay in a currency other than USD, the prices listed in your currency on Cloud Platform SKUs apply.
Pricing overview
Cloud KMS pricing is based on the number of active key versions, the protection level on the key versions, and a usage rate for key operations. For keys with protection level SOFTWARE, asymmetric keys and symmetric keys have the same price.
| Billable item | For keys with protection level SOFTWARE | For keys with protection level HSM | For keys with protection level EXTERNAL or EXTERNAL_VPC 1 |
|---|---|---|---|
Active symmetric AES-256 and HMAC key versions 2 |
$0.06 per month 3 |
$1.00 per month 3 |
$3.00 per month 3 |
Active asymmetric RSA 2048 key versions 2 |
$0.06 per month 3 |
$1.00 per month 3 |
$3.00 per month 3 |
Active asymmetric RSA 3072, RSA 4096 or Elliptic Curve key versions 2 |
$0.06 per month 3 |
$2.50 per month for the first 2,000 3 $1.00 per month 3 thereafter |
$3.00 per month 3 |
Destroyed key versions |
Free |
Free |
Free |
$0.03 per 10,000 operations 6 |
$0.03 per 10,000 operations 6 for AES-256, HMAC and RSA 2048 keys $0.15 per 10,000 operations 6 for RSA 3072, RSA 4096, and Elliptic Curve keys |
$0.03 per 10,000 operations 6 |
|
Key operations: Admin |
Free |
Free |
Free |
Notes
1. Prices do not include any charges that may be imposed by the external key management partner's system.
2. A key version is active if it is in any of these states:
3. Cloud KMS bills monthly for the number of active key versions which you have for the month. This is not rounded but based on actual consumption. That is, if you had a key version that was active for only 2 days, you would be billed proportional to that usage, and not for the whole month.
4. A cryptographic operation is any form of encryption, decryption, signing, or generating random bytes.
5. All billable items are billed to the project that owns the key, even for CMEK keys that operate on a resource owned by another project.
6. Cloud KMS bills cryptographic operations per 10,000 operations. This is not rounded but based on actual consumption. That is, if your project performed 25,000 cryptographic operations, you would be billed for 2.5 times 10,000 operations.
Pricing example
In this example, we show a simple scenario that might apply if you are just getting started with Cloud KMS. We use a monthly billing period to simplify the calculations.
Suppose you have the following key usage pattern in a given month:
- 100 keys
(
CryptoKeys) with protection level SOFTWARE, with each key having 5 active versions, for a total of 500 key versions (CryptoKeyVersions). - 100,000 key use operations for symmetric encryption and decryption, or signing and verification. (Key admin operations are free.)
- 10,000 key use operations for retrieval of a public key for an asymmetric key.
- 50,000 key use operations for asymmetric signing.
Your bill for the month would be calculated as follows:
- 500 key versions at $0.06: $30.00.
- 100,000 key use operations for symmetric encryption and decryption (or signing and verification) at $0.03 per 10,000 operations: $0.30.
- 10,000 key use operations for retrieval of a public key at $0.03 per 10,000 operations: $0.03.
- 50,000 key use operations for asymmetric signing at $0.03 per 10,000 operations: $0.15.
Total for this pricing example: $30.48
Viewing usage
The Google Cloud console provides a transaction history for each of your projects. This history describes your current balance and estimated resource usage for that particular project.
To view a project's transaction history, go to the estimated billing invoice page.
What's next
- Read the Cloud Key Management Service documentation.
- Get started with Cloud Key Management Service.
- Try the Pricing calculator.
- Learn about Cloud Key Management Service solutions and use cases.