AWS Certificate Manager Private Certificate Authority
User Guide (Version latest)


You are charged for private certificates whose private key you can access. This includes certificates that you export from ACM and certificates that you create from the ACM PCA API or ACM PCA CLI. You are not charged for a private certificate after it has been deleted. However, if you restore a private CA, you are charged for the time between deletion and restoration. Private certificates whose private key you cannot access are free. These include certificates that are used with Integrated Services such as Elastic Load Balancing, CloudFront, and API Gateway. For the latest ACM PCA pricing information, see the ACM Pricing page on the AWS website.