AWS Secrets Manager vs CyberArk Privileged Access Manager comparison

Amazon Web Services (AWS) and CyberArk are both solutions in the Enterprise Password Managers category. Amazon Web Services (AWS) is ranked #2 with an average rating of 9.2, while CyberArk is ranked #3 with an average rating of 8.6. Amazon Web Services (AWS) holds a 14.7% mindshare in EPM, compared to CyberArk’s 6.7% mindshare. Additionally, 100% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 95% of CyberArk users who would recommend it.

AWS Secrets Manager

Read 17 AWS Secrets Manager reviews

7,657 Views
7,657 Comparison Views

100% willing to recommend

CyberArk Privileged Access ...

Read 230 CyberArk Privileged Access Manager reviews

19,725 Views
4,931 Comparison Views

95% willing to recommend

AWS Secrets Manager

CyberArk Privileged Access ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 16, 2024

CyberArk Privileged Access Manager and AWS Secrets Manager are key players in the privileged access management and secret management domain. CyberArk holds an advantage in security and compliance due to its robust feature set, while AWS Secrets Manager excels in ease of integration within the AWS ecosystem.

Features: CyberArk Privileged Access Manager provides comprehensive privileged session management, password vaulting, and security intelligence, ensuring tight control over privileged accounts. Its security features make it suitable for compliance-focused organizations. AWS Secrets Manager offers seamless integration with AWS services, secure storage, and management of secrets with rotation capabilities, allowing users to efficiently manage secrets in the AWS environment.

Room for Improvement: CyberArk Privileged Access Manager could enhance its user interface, integrate better with diverse systems, and improve reporting capabilities to reduce complexity and support a wider range of organizations. AWS Secrets Manager needs more customization options and should enhance integration with non-AWS services while optimizing its pricing model to address perceptions of high costs.

Ease of Deployment and Customer Service: CyberArk Privileged Access Manager, often deployed on-premises or in hybrid environments, requires significant time and resources but benefits from strong customer service and support. AWS Secrets Manager, being a public cloud service, offers easy deployment within AWS but lacks extensive customization options. CyberArk users report mixed experiences with support, while AWS users typically have positive support experiences with enterprise support.

Pricing and ROI: CyberArk Privileged Access Manager is seen as a premium offering with high costs, necessitating careful planning to optimize its value, with investments justified by strong security and compliance features. AWS Secrets Manager is reasonably priced for smaller applications but can become costly with heavy use. It offers a straightforward management and pricing model, with users noting potential cost optimizations in careful secret management.

To learn more, read our detailed AWS Secrets Manager vs. CyberArk Privileged Access Manager Report (Updated: April 2026).

Buyer's Guide

AWS Secrets Manager vs. CyberArk Privileged Access Manager

April 2026

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Secrets Manager

Ranking in Enterprise Password Managers

2nd

Average Rating

9.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Secrets Management Tools (3rd)

CyberArk Privileged Access ...

Ranking in Enterprise Password Managers

3rd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Mindshare comparison

As of May 2026, in the Enterprise Password Managers category, the mindshare of AWS Secrets Manager is 14.7%, down from 18.7% compared to the previous year. The mindshare of CyberArk Privileged Access Manager is 6.7%, down from 7.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Password Managers Mindshare Distribution
Product	Mindshare (%)
AWS Secrets Manager	14.7%
CyberArk Privileged Access Manager	6.7%
Other	78.6%

Enterprise Password Managers

Featured Reviews

Mahadev Metre

DevOps Engineer at Paydoh

Consistent security and efficiency improvements optimize IT infrastructure with effective management

When creating AWS Secrets Manager, it should be automated using tools such as Terraform, Puppet, or Ansible. With Terraform code, you specify the encryption key, secret name, rotation policy, and secret replication. Human error occurs when feeding secret values manually, especially with large amounts of secrets to input. Secrets should never be protected only by IAM. They should be protected by multiple layers, such as IAM and one or two KMS keys. Additional security measures could be beneficial if necessary. The rotation policy is crucial because some secrets may become obsolete, require updates, or get compromised. With a weekly rotation policy, if unauthorized access occurs, the exposure is limited to seven days. The rotation policy can be customized according to needs.

Read full review

Atul-Gujar

CyberArk manager at a comms service provider with 10,001+ employees

Secures critical infrastructures with essential user session audit records

A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would highly recommend AWS Secrets Manager for secret management in AWS."

"AWS Secrets Manager has impacted my organization positively through security improvements because on that basis, I can rotate my keys and passwords at a certain time."

"I would recommend everyone to use AWS Secrets Manager for their security and for storing their passwords, because I see that passwords nowadays are easily compromised."

"In summary, this is a good product and well suits our needs."

"It's highly scalable, so I'd rate it a ten out of ten."

"Overall, this is a good product, we are satisfied with the support, and I recommend it."

"If your workloads are running on AWS and you want a quick and easy integration with a solution to manage your secrets, AWS Secrets Manager can do the job."

"The most valuable feature of AWS Secrets Manager is the ability to keep data secret and assign access permissions to people to grant or restrict access."

More AWS Secrets Manager pros

"I see the Auto IT integration as the most valuable feature."

"This solution is quite stable."

"Password Vault's policy configuration is very good - when you receive an attack, you can segment the structure of the project in order to isolate parts or users."

"It is useful for protecting passwords. If you need to do access security management, you can first use the CyberArk console, and after that, you can connect the firewall interface or firewall command line. Similarly, if you need to do an RDP session, you need to first log in to CyberArk before connecting to the Windows RDP session. This way, the admin doesn't know the password, and that password is changed immediately. To change the password, you first discover the old password in the network, and after that, you can change the password."

"Session recordings and timestamps are valuable features. They allow me to specifically select the time a particular command was executed, so I do not have to review the entire recording. I can click on events to determine where and when they happened."

"You can easily manage more than 4000 accounts with one PSM."

"CyberArk is a very important tool for my organization."

"It has helped us with our adoption with other teams, and it has also helped us to integrate it at the ground level."

More CyberArk Privileged Access Manager pros

Cons

"If you don't have enterprise support, then you will not be able to get through to them to get the help. It is not only applicable to AWS Secrets Manager. It is also applicable to any service on AWS."

"The price of the solution could improve."

"It would be good if the AWS Secrets Manager were more customizable."

"AWS Secrets Manager could support hybrid infrastructure."

"There is a need for better environmental implementation, such as having a security fund as a solution."

"There is room for improvement in the pricing model."

"The solution's initial setup process is complicated."

"We occasionally have problems with rate limits, although that is a problem more generally with AWS."

More AWS Secrets Manager cons

"CyberArk Privileged Access Manager could improve the integration with other third-party secret managers, and vault solutions."

"CyberArk PAM could greatly benefit from an under-the-hood update; integrating machine learning algorithms could provide predictive insights."

"I would like to see improvement in the custom connector for integration with different devices."

"The graphical user interface could be simplified and harmonized for better usability. It should be consistent. Its GUI is very confusing."

"They are taking two to three days for resolution are too slow. Customers, including myself, do not want to wait this long for solutions."

"The reporting should be improved. There should be more customization. The report should show how we are going to mitigate the risk because we cannot show the system environment to each and every auditor."

"We don't often contact technical support, but when we do it, the response could be faster and better."

"The main challenge was integrating with in-house IT and business applications, which are not standard. We needed to create special updates for that kind of integration."

More CyberArk Privileged Access Manager cons

Pricing and Cost Advice

"I don't believe there is a license cost for the solution."

"The solution is expensive."

"The cost is somewhat high."

"We've observed that AWS Secrets Manager pricing is based on a per-secret-per-month model. As a result, we prefer to divide our secrets into individual pieces to increase security and grant specific access permissions to certain secrets, systems, or individuals. However, this approach results in higher costs. Therefore, we have been exploring ways to combine our secrets into groups to reduce expenses and simplify management. Nonetheless, we acknowledge that this issue may not be related to the secret manager's functionality."

"We purchase a monthly license for the product."

"In comparison to other products on the market, CyberArk is a more costly product."

"CyberArk is one of the best PAM solutions and one of the most expensive, but it works better than the others, so the pricing is fair."

"The solution is very expensive and requires a license. We pay for an enterprise license."

"Pricing and licensing depend on the environment."

"I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing concerns."

"I would rate the cost of CyberArk Privileged Access Manager seven out of ten with ten being the most expensive."

"Overall, its pricing is really good. The main difference from all the other vendors is that they have one package that covers all the functionality and modules of the basic PAM, except the add-on modules like adware and server protection. It also doesn't include the licenses for domain controller protection or maybe an API call-related feature. For the basic privileged access management, the bundle pricing is really good, but when it comes to an agent-based solution for advanced cyber protection or application identity managers, it is expensive. Services are also very expensive if you hire the services team from CyberArk, but these guys are really good. For a couple of large banking projects, we had an experience with them. The banks wanted to have things quickly and efficiently, so we had to hire them. If we take four weeks, these guys can do everything on a weekend. They charge quite a big sum of money, but they know the system well."

"The price of this solution is expensive."

More CyberArk Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

Manufacturing Company

Comms Service Provider

Financial Services Firm

13%

Manufacturing Company

11%

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	174

Questions from the Community

Which is better - Azure Key Vault or AWS Secrets Manager?

Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...

See all answers

Which is better - HashiCorp Vault or AWS Secrets Manager?

HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic sol...

See all answers

What needs improvement with AWS Secrets Manager?

AWS Secrets Manager could not be better because there has been no frustration with the product.

See all answers

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What do you like most about CyberArk Privileged Access Manager?

The most valuable features of the solution are control and analytics.

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

Comparisons

Azure Key Vault vs AWS Secrets Manager

Compared 84% of the time

HashiCorp Vault vs AWS Secrets Manager

Compared 3% of the time

1Password Business vs AWS Secrets Manager

Compared 3% of the time

Bitwarden vs AWS Secrets Manager

Compared 2% of the time

Delinea Secret Server vs AWS Secrets Manager

Compared 2% of the time

More AWS Secrets Manager Competitors

One Identity Safeguard vs CyberArk Privileged Access Manager

Compared 4% of the time

Teleport vs CyberArk Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs CyberArk Privileged Access Manager

Compared 3% of the time

Saviynt Identity Cloud vs CyberArk Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs CyberArk Privileged Access Manager

Compared 3% of the time

More CyberArk Privileged Access Manager Competitors

Product Reports

Buyer's Guide

Enterprise Password Managers

May 2026

Download AWS Secrets Manager product report

Buyer's Guide

CyberArk Privileged Access Manager

May 2026

CyberArk Privileged Access Manager report

Download CyberArk Privileged Access Manager product report

Also Known As

No data available

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

AWS Secrets Manager offers key-value storage, credential management, and secure access permissions, streamlining the handling of API keys and secret information within the AWS environment.

AWS Secrets Manager integrates seamlessly with AWS services, supporting secure management of credentials and encryption with KMS. It enhances security and efficiency with automated secret retrieval, IAM roles, and version control. While its simplicity and cost-effectiveness are notable, there is potential for improvement in rate limits, integrating with platforms like Azure, and addressing small organization pricing. Its centralized approach benefits auto-scaling, secure card details, microservices, and databases.

What are the main features of AWS Secrets Manager?

Key-Value Pair Storage: Stores credentials securely.
Credential Management: Manages system-to-system credentials.
Rotation Configurations: Supports Lambda-based automatic secret rotation.
Seamless Integration: Works smoothly with AWS services.
API Key Handling: Secure management of API keys and secrets.

What benefits should users consider when evaluating AWS Secrets Manager?

Enhanced Security: Automated encryption and secret retrieval.
Cost-Effectiveness: Reduces risks and facilitates AWS integration.
Operational Efficiency: Simplifies credential management.

AWS Secrets Manager is implemented in diverse industries for managing sensitive information, facilitating secure operations for microservices, GoLang applications, and databases. It supports orchestration and dynamic secret retrieval, beneficial for automated scaling and secure data access during application runtime.

Amazon Web Services (AWS)

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

CyberArk

Sample Customers

Autodesk, Clevy, Stackery

Rockwell Automation

Buyer's Guide

AWS Secrets Manager vs. CyberArk Privileged Access Manager

April 2026

Free Report: AWS Secrets Manager vs. CyberArk Privileged Access Manager

Find out what your peers are saying about AWS Secrets Manager vs. CyberArk Privileged Access Manager and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,221 professionals have used our research since 2012.

See our AWS Secrets Manager vs. CyberArk Privileged Access Manager report.

See our list of best Enterprise Password Managers vendors.

We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.