Serverless CA on AWS is an open-source project that provides a Terraform module for deploying a serverless Certificate Authority on Amazon Web Services. It offers an alternative to AWS Private CA, with a typical cost of about $50 per year, compared with approximately $10,000 per year for AWS Private CA. The project stores CA private keys in hardware certified to FIPS 140-3 Level 3 and supports post-quantum cryptography.

Published through the public Terraform Registry, the module includes a wide range of configuration options and is designed to operate without managing server infrastructure. Its capabilities support certificate-based security across AWS services, including API Gateway, Application Load Balancer, CloudFront, and IAM Roles Anywhere. The project also provides guidance on certificate configuration, automation, revocation, security, and post-quantum cryptography, along with options for Slack notifications. Users can access setup instructions, FAQs, how-to guides, and technical references, as well as conference talks, demonstrations, and blog posts covering practical integrations and use cases.