Azure Key Vault Plans Pricing
Azure Key Vault is metered as per-operation transactions for secrets, certificates, and software-protected keys (Standard tier), HSM-protected keys (Premium tier), and managed HSM (single-tenant pool with hourly partition pricing). Renewals and certificates have separate per-operation charges. Pricing is per 10,000 transactions; managed HSM is billed per partition-hour. See Azure Key Vault pricing page for the exact per-region rates.
Plans
Secrets, software-protected keys, certificate operations. Metered per 10,000 operations.
- Secrets storage
- Software-protected RSA, EC keys
- Certificate lifecycle
- Per-operation metering
Adds HSM-protected keys (FIPS 140-2 Level 2). HSM key operations and HSM-protected key storage carry uplifted per-operation rates.
- HSM-protected RSA, EC keys (FIPS 140-2 Level 2)
- All Standard features
Single-tenant FIPS 140-2 Level 3 HSM pool. Billed per partition-hour rather than per-operation. Supports up to 5 instances per subscription per region, 5,000 keys per HSM.
- FIPS 140-2 Level 3 HSM
- Single-tenant
- Up to 5,000 keys per HSM
- BYOK / HYOK support