Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | AWS Private CA by AWS View product | Google Cloud KMS by Google Cloud View product |
|---|---|---|
| Overview | ||
| What it is | AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors. | Try Google Cloud KMS free: a cryptographic key management service with cloud HSM. See who it suits and how it stacks up against other Key Management tools. |
| Product type | Managed Private Certificate Authority Service | Cryptographic Key Management Service |
| Best for | Cross-industry, Financial Services, Healthcare, Government, Manufacturing, Technology | Cross-industry, Financial Services, Healthcare, Public Sector, Government, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | CloudHybrid |
| Deployment details | Cloud; AWS Cloud-native managed PKI service | Cloud; Hybrid; Google Cloud; External root-of-trust |
| Data residency | Private CA keys generated and stored in customer-selected AWS Region HSM | Regional, multi-regional, and global endpoints |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | AWS Certificate ManagerAmazon EKSAWS IoT Coreenterprise mobile and server clients | Google Cloud PlatformAPIsPKCS#11 |
| Compliance | FIPS 140-2 Level 3, SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High | FIPS 140-2/3ISO/IEC 27001SOC 1/2/3HIPAAPCI-DSS |
| Integrations & coverage | ||
| Integrations | AWS Certificate Manager (ACM)AWS KMSAWS CloudTrailMicrosoft IntuneJamfKubernetes cert-managerAWS IoT Core | Cloud StorageBigQueryCompute EngineCloud SQLSecret ManagerSecurity Command Center |
| Industries | Cross-industryFinancial ServicesHealthcareGovernmentManufacturingTechnology | Cross-industryFinancial ServicesHealthcarePublic SectorGovernmentTechnology |
| Regions | Global (supported AWS Regions) | GlobalMulti-regionalRegional |
| Vendor | ||
| Company | AWS | Google Cloud |
| Headquarters | Seattle, Washington, USA | Mountain View, California, USA |
| Company size | 100,000+ | 100,000+ |
| Founded | 2006 | 2008 |
Overview
What it is
AWS Private CA
AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors.Google Cloud KMS
Try Google Cloud KMS free: a cryptographic key management service with cloud HSM. See who it suits and how it stacks up against other Key Management tools.Product type
AWS Private CA
Managed Private Certificate Authority ServiceGoogle Cloud KMS
Cryptographic Key Management ServiceBest for
AWS Private CA
Cross-industry, Financial Services, Healthcare, Government, Manufacturing, TechnologyGoogle Cloud KMS
Cross-industry, Financial Services, Healthcare, Public Sector, Government, TechnologyPricing
Pricing model
AWS Private CA
Contact VendorGoogle Cloud KMS
Contact VendorFree trial
AWS Private CA
Free trial: yesGoogle Cloud KMS
Free trial: yesDeployment
Deployment options
AWS Private CA
Cloud
Google Cloud KMS
CloudHybrid
Deployment details
AWS Private CA
Cloud; AWS Cloud-native managed PKI serviceGoogle Cloud KMS
Cloud; Hybrid; Google Cloud; External root-of-trustData residency
AWS Private CA
Private CA keys generated and stored in customer-selected AWS Region HSMGoogle Cloud KMS
Regional, multi-regional, and global endpointsKey features
What it offers
AWS Private CA
- Private X.509 certificate issuance
- FIPS 140-2 Level 3 HSM key protection
- Custom certificate extensions and templates
- Automated renewal with AWS Certificate Manager
- CRL and OCSP revocation endpoints
- SCEP connector for MDM
- Internal TLS encryption
- Mutual TLS (mTLS) service-to-service auth
Google Cloud KMS
- Symmetric & asymmetric key management
- Cloud HSM (FIPS 140-2 Level 3)
- External Key Manager (EKM)
- Automated key rotation
- CMEK integration
- Data at rest encryption
- Digital signing
- Database CMEK protection
Platform & access
API access
AWS Private CA
API access: yesGoogle Cloud KMS
API access: yesSingle sign-on (SSO)
AWS Private CA
SSO: yesGoogle Cloud KMS
SSO: yesRole-based access (RBAC)
AWS Private CA
RBAC: yesGoogle Cloud KMS
RBAC: yesMulti-tenant
AWS Private CA
Multi-tenant: yesGoogle Cloud KMS
Multi-tenant: yesMobile app
AWS Private CA
Mobile app: yesGoogle Cloud KMS
Mobile app: noSupported platforms
AWS Private CA
AWS Certificate ManagerAmazon EKSAWS IoT Coreenterprise mobile and server clients
Google Cloud KMS
Google Cloud PlatformAPIsPKCS#11
Compliance
AWS Private CA
FIPS 140-2 Level 3, SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Google Cloud KMS
FIPS 140-2/3ISO/IEC 27001SOC 1/2/3HIPAAPCI-DSS
Integrations & coverage
Integrations
AWS Private CA
AWS Certificate Manager (ACM)AWS KMSAWS CloudTrailMicrosoft IntuneJamfKubernetes cert-managerAWS IoT Core
Google Cloud KMS
Cloud StorageBigQueryCompute EngineCloud SQLSecret ManagerSecurity Command Center
Industries
AWS Private CA
Cross-industryFinancial ServicesHealthcareGovernmentManufacturingTechnology
Google Cloud KMS
Cross-industryFinancial ServicesHealthcarePublic SectorGovernmentTechnology
Regions
AWS Private CA
Global (supported AWS Regions)
Google Cloud KMS
GlobalMulti-regionalRegional
Vendor
Company
AWS Private CA
AWSGoogle Cloud KMS
Google CloudHeadquarters
AWS Private CA
Seattle, Washington, USAGoogle Cloud KMS
Mountain View, California, USACompany size
AWS Private CA
100,000+Google Cloud KMS
100,000+Founded
AWS Private CA
2006Google Cloud KMS
2008