AWS Secrets Manager vs CyberArk Privileged Access Manager comparison

Amazon Web Services (AWS) and CyberArk are both solutions in the Enterprise Password Managers category. Amazon Web Services (AWS) is ranked #2 with an average rating of 9.2, while CyberArk is ranked #3 with an average rating of 8.6. Amazon Web Services (AWS) holds a 14.7% mindshare in EPM, compared to CyberArk’s 6.7% mindshare. Additionally, 100% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 95% of CyberArk users who would recommend it.

AWS Secrets Manager

Read 17 AWS Secrets Manager reviews

7,657 Views
7,657 Comparison Views

100% willing to recommend

CyberArk Privileged Access ...

Read 230 CyberArk Privileged Access Manager reviews

19,725 Views
4,931 Comparison Views

95% willing to recommend

AWS Secrets Manager

CyberArk Privileged Access ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 16, 2024

CyberArk Privileged Access Manager and AWS Secrets Manager are key players in the privileged access management and secret management domain. CyberArk holds an advantage in security and compliance due to its robust feature set, while AWS Secrets Manager excels in ease of integration within the AWS ecosystem.

Features: CyberArk Privileged Access Manager provides comprehensive privileged session management, password vaulting, and security intelligence, ensuring tight control over privileged accounts. Its security features make it suitable for compliance-focused organizations. AWS Secrets Manager offers seamless integration with AWS services, secure storage, and management of secrets with rotation capabilities, allowing users to efficiently manage secrets in the AWS environment.

Room for Improvement: CyberArk Privileged Access Manager could enhance its user interface, integrate better with diverse systems, and improve reporting capabilities to reduce complexity and support a wider range of organizations. AWS Secrets Manager needs more customization options and should enhance integration with non-AWS services while optimizing its pricing model to address perceptions of high costs.

Ease of Deployment and Customer Service: CyberArk Privileged Access Manager, often deployed on-premises or in hybrid environments, requires significant time and resources but benefits from strong customer service and support. AWS Secrets Manager, being a public cloud service, offers easy deployment within AWS but lacks extensive customization options. CyberArk users report mixed experiences with support, while AWS users typically have positive support experiences with enterprise support.

Pricing and ROI: CyberArk Privileged Access Manager is seen as a premium offering with high costs, necessitating careful planning to optimize its value, with investments justified by strong security and compliance features. AWS Secrets Manager is reasonably priced for smaller applications but can become costly with heavy use. It offers a straightforward management and pricing model, with users noting potential cost optimizations in careful secret management.

To learn more, read our detailed AWS Secrets Manager vs. CyberArk Privileged Access Manager Report (Updated: April 2026).

Buyer's Guide

AWS Secrets Manager vs. CyberArk Privileged Access Manager

April 2026

Download the complete report

Helped 893,244 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Secrets Manager

Ranking in Enterprise Password Managers

2nd

Average Rating

9.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Secrets Management Tools (3rd)

CyberArk Privileged Access ...

Ranking in Enterprise Password Managers

3rd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Mindshare comparison

As of May 2026, in the Enterprise Password Managers category, the mindshare of AWS Secrets Manager is 14.7%, down from 18.7% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 6.7%, down from 7.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Password Managers Mindshare Distribution
Product	Mindshare (%)
AWS Secrets Manager	14.7%
CyberArk Privileged Access Manager	6.7%
Other	78.6%

Enterprise Password Managers

Featured Reviews

Mahadev Metre

DevOps Engineer at Paydoh

Consistent security and efficiency improvements optimize IT infrastructure with effective management

When creating AWS Secrets Manager, it should be automated using tools such as Terraform, Puppet, or Ansible. With Terraform code, you specify the encryption key, secret name, rotation policy, and secret replication. Human error occurs when feeding secret values manually, especially with large amounts of secrets to input. Secrets should never be protected only by IAM. They should be protected by multiple layers, such as IAM and one or two KMS keys. Additional security measures could be beneficial if necessary. The rotation policy is crucial because some secrets may become obsolete, require updates, or get compromised. With a weekly rotation policy, if unauthorized access occurs, the exposure is limited to seven days. The rotation policy can be customized according to needs.

Read full review

Atul-Gujar

CyberArk manager at a comms service provider with 10,001+ employees

Secures critical infrastructures with essential user session audit records

A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of AWS Secrets Manager is the ability to keep data secret and assign access permissions to people to grant or restrict access."

"Secrets Manager helps in retrieving the enrollment variables used by the code."

"If your workloads are running on AWS and you want a quick and easy integration with a solution to manage your secrets, AWS Secrets Manager can do the job."

"The most valuable feature is the management of credentials."

"The most valuable feature is usability, as it is quite user-friendly."

"It's highly scalable, so I'd rate it a ten out of ten."

"The most valuable feature of AWS Secrets Manager is its seamless integration with various AWS services."

"Overall, this is a good product, we are satisfied with the support, and I recommend it."

More AWS Secrets Manager pros

"Auditing and control are the most valuable, as you can control password management almost to the max, giving you, your users and your auditors great flexibility without compromising security."

"The benefit of it is it's stable, it's old-school, it just works."

"With PAM in place, we've experienced a significant reduction in potential security breaches."

"CyberArk makes our environment more secure and prevents possible attacks by compromised accounts."

"Implementing the CyberArk solution helps these companies to think about their privileged accounts, organize them in the CyberArk solution, and then get control of their privileged accounts to safely store and manage these, knowing that only the correct persons can access these accounts and that the different devices can only be managed via one central entry point to the datacenter."

"In terms of stability, there are no complaints."

"CyberArk Privileged Access Manager provides granularity. You can break things down into individual safes. You have specific access to safes by individual or group. The interface is with AD, with LDAP, or with local CyberArk passwords. You also have the ability to establish policies for your individual credentials."

"The biggest feature is the security of the overall solution. It's very secure. The vaulting technology and the number of security layers involved in the vault, where privileged accounts are actually stored, is the heart of the solution."

More CyberArk Privileged Access Manager pros

Cons

"AWS Secrets Manager could support hybrid infrastructure."

"The solution's initial setup process is complicated."

"It would be good if the AWS Secrets Manager were more customizable."

"The price of the solution could improve."

"It would be good if the AWS Secrets Manager were more customizable."

"There is room for improvement in terms of integrating with certain other platforms."

"There is a need for better environmental implementation, such as having a security fund as a solution."

"An area for improvement in AWS Secrets Manager could be expanding integration options beyond AWS services."

More AWS Secrets Manager cons

"The challenge with the product is pricing since it's expensive. It also needs to improve the customization. We encountered some stability issues as well."

"The solution needs better features for end users to manage their own whitelisting for API retrieval."

"I'm not a fan of technical support with CyberArk. It's like jumping through red tape and hoops."

"There is a bit of a learning curve, but it's a pretty complex solution."

"With regards to potential improvements for the CyberArk product, I find the product quite expensive and I would like to see the cost reduced."

"Having a centralized place to manage the solution has been something that I have always wanted, and they are starting to understand that and bring things back together."

"Enhanced PSM support for Java based applications."

"If you are an administrator or architect, then the solution is kind of complicated, as it is mostly focused on the end user. So, they need to also focus on the people who are implementing it."

More CyberArk Privileged Access Manager cons

Pricing and Cost Advice

"We purchase a monthly license for the product."

"The cost is somewhat high."

"I don't believe there is a license cost for the solution."

"We've observed that AWS Secrets Manager pricing is based on a per-secret-per-month model. As a result, we prefer to divide our secrets into individual pieces to increase security and grant specific access permissions to certain secrets, systems, or individuals. However, this approach results in higher costs. Therefore, we have been exploring ways to combine our secrets into groups to reduce expenses and simplify management. Nonetheless, we acknowledge that this issue may not be related to the secret manager's functionality."

"The solution is expensive."

"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."

"Pricing is a problem. CyberArk is expensive compared to other products I know. It is similar to buying a German car. It comes with all the bells and whistles, but some companies may find it too expensive."

"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."

"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."

"It's per-company, license-based."

"If you are looking at implementing this solution, buy the training and go to it."

"They have two types of licensing: purchase and subscription. You have to pay for each admin user, such as Microsoft admin, mail admin, database admin, etc."

"I haven't seen the numbers. I know it is not cheap, but I don't know what it is. I would rate it a six out of ten in terms of pricing. It is definitely more expensive than the other product, but it also provides more functionality, and it is modular too. So, we pay for the functionality we're actually going to use, and that's nice."

More CyberArk Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

893,244 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

Manufacturing Company

Comms Service Provider

Financial Services Firm

13%

Manufacturing Company

11%

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	174

Questions from the Community

Which is better - Azure Key Vault or AWS Secrets Manager?

Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...

See all answers

Which is better - HashiCorp Vault or AWS Secrets Manager?

HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...

See all answers

What needs improvement with AWS Secrets Manager?

AWS Secrets Manager could not be better because there has been no frustration with the product.

See all answers

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What do you like most about CyberArk Privileged Access Manager?

The most valuable features of the solution are control and analytics.

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

Comparisons

Azure Key Vault vs AWS Secrets Manager

Compared 84% of the time

HashiCorp Vault vs AWS Secrets Manager

Compared 3% of the time

1Password Business vs AWS Secrets Manager

Compared 3% of the time

Bitwarden vs AWS Secrets Manager

Compared 2% of the time

Delinea Secret Server vs AWS Secrets Manager

Compared 2% of the time

More AWS Secrets Manager Competitors

One Identity Safeguard vs CyberArk Privileged Access Manager

Compared 4% of the time

Teleport vs CyberArk Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs CyberArk Privileged Access Manager

Compared 3% of the time

Saviynt Identity Cloud vs CyberArk Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs CyberArk Privileged Access Manager

Compared 3% of the time

More CyberArk Privileged Access Manager Competitors

Product Reports

Buyer's Guide

Enterprise Password Managers

May 2026

Download AWS Secrets Manager product report

Buyer's Guide

CyberArk Privileged Access Manager

May 2026

CyberArk Privileged Access Manager report

Download CyberArk Privileged Access Manager product report

Also Known As

No data available

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

AWS Secrets Manager offers key-value storage, credential management, and secure access permissions, streamlining the handling of API keys and secret information within the AWS environment.

AWS Secrets Manager integrates seamlessly with AWS services, supporting secure management of credentials and encryption with KMS. It enhances security and efficiency with automated secret retrieval, IAM roles, and version control. While its simplicity and cost-effectiveness are notable, there is potential for improvement in rate limits, integrating with platforms like Azure, and addressing small organization pricing. Its centralized approach benefits auto-scaling, secure card details, microservices, and databases.

What are the main features of AWS Secrets Manager?

Key-Value Pair Storage: Stores credentials securely.
Credential Management: Manages system-to-system credentials.
Rotation Configurations: Supports Lambda-based automatic secret rotation.
Seamless Integration: Works smoothly with AWS services.
API Key Handling: Secure management of API keys and secrets.

What benefits should users consider when evaluating AWS Secrets Manager?

Enhanced Security: Automated encryption and secret retrieval.
Cost-Effectiveness: Reduces risks and facilitates AWS integration.
Operational Efficiency: Simplifies credential management.

AWS Secrets Manager is implemented in diverse industries for managing sensitive information, facilitating secure operations for microservices, GoLang applications, and databases. It supports orchestration and dynamic secret retrieval, beneficial for automated scaling and secure data access during application runtime.

Amazon Web Services (AWS)

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

CyberArk

Sample Customers

Autodesk, Clevy, Stackery

Rockwell Automation

Buyer's Guide

AWS Secrets Manager vs. CyberArk Privileged Access Manager

April 2026

Free Report: AWS Secrets Manager vs. CyberArk Privileged Access Manager

Find out what your peers are saying about AWS Secrets Manager vs. CyberArk Privileged Access Manager and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,244 professionals have used our research since 2012.

See our AWS Secrets Manager vs. CyberArk Privileged Access Manager report.

See our list of best Enterprise Password Managers vendors.

We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.