Serverless CA on AWS is an open-source project providing a Terraform module for deploying a serverless Certificate Authority (CA) on Amazon Web Services. It offers an alternative to AWS Private CA, with a typical stated cost of about $50 per year compared with an equivalent AWS Private CA cost of around $10,000 per year. The CA’s private keys are stored in FIPS 140-3 Level 3-certified hardware, and the service supports post-quantum cryptography.

Published through the public Terraform Registry, the module is designed to run entirely on serverless AWS services and provides configuration options for certificate management and automation, including Slack notifications. Its documentation and how-to guides cover integrations such as mutual TLS for API Gateway, Application Load Balancer, and CloudFront, as well as IAM Roles Anywhere, certificate revocation, and certificate locations. The project also shares conference talks, demos, and technical articles to help users understand and implement its capabilities. Serverless CA on AWS is supported by Q-Solution.