AWS Secrets Manager vs CyberArk Enterprise Password Vault comparison

Cancel
You must select at least 2 products to compare!
Amazon Web Services (AWS) Logo
15,396 views|13,600 comparisons
100% willing to recommend
CyberArk Logo
7,194 views|4,460 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between AWS Secrets Manager and CyberArk Enterprise Password Vault based on real PeerSpot user reviews.

Find out in this report how the two Enterprise Password Managers solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed AWS Secrets Manager vs. CyberArk Enterprise Password Vault Report (Updated: May 2024).
787,033 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"AWS Secrets Manager is used for storing secret information that has to be a secret from your customer and your employees.""All our workloads are running on AWS, so integration with our workload is much easier on AWS Secrets Manager than going with another solution such as Thycotic.""Integrating with other services was straightforward, especially within the AWS environment.""It's highly scalable, so I'd rate it a ten out of ten.""The API is fine and works well.""The most valuable feature is the management of credentials.""The most valuable feature is usability, as it is quite user-friendly.""The solution is very scalable."

More AWS Secrets Manager Pros →

"The ability to monitor privileged accounts throughout the enterprises.""If properly set up, CyberArk Enterprise Password Vault has good stability, and is a very solid tool. It can run by itself. Its most valuable features are auto password recycling and PSM.""The accounts are maintained automatically. Hence, resource and administration costs are less.""The password protection itself is the most important feature. It's something we didn't have before.""Our privileged accounts are now stored in a more secure location and lateral movement within the network have been lessened.""I haven't really thought about anything that I want to use it for, that I couldn't use it for.""The most valuable feature is the ability to delegate access to admins when they need it.""Super stable and easy to scale"

More CyberArk Enterprise Password Vault Pros →

Cons
"We occasionally have problems with rate limits, although that is a problem more generally with AWS.""If you add one more layer of security to AWS Secrets Manager, even the programmer will not be able to see the secrets.""There is a need for better environmental implementation, such as having a security fund as a solution.""AWS Secrets Manager could support hybrid infrastructure.""There is room for improvement in the pricing model.""It would be good if the AWS Secrets Manager were more customizable.""If you don't have enterprise support, then you will not be able to get through to them to get the help. It is not only applicable to AWS Secrets Manager. It is also applicable to any service on AWS.""An area for improvement in AWS Secrets Manager could be expanding integration options beyond AWS services."

More AWS Secrets Manager Cons →

"The architecture needs to be improved.""There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment.""It is complicated to deploy for Windows servers compared to other vendors.""CyberArk Enterprise Password Vault's GUI has certain shortcomings that need improvement.""I'd like it to be a little more granular. I want a little bit more control over exactly what we do. I know if you do that, you add more knobs and dials to deal with, but that's just my personal approach: granular access.""To get it to a ten it should give other possibilities to select if you could follow the keystrokes. It should have a flexibility with things where people can use it a lot faster.""We require IAM (identify and access management) capability at the administrator level because we need more identification.""The solution is too big and complex for any businesses that are small or medium-sized. They should offer a more compact version or make a solution better suited to smaller businesses."

More CyberArk Enterprise Password Vault Cons →

Pricing and Cost Advice
  • "I don't believe there is a license cost for the solution."
  • "We've observed that AWS Secrets Manager pricing is based on a per-secret-per-month model. As a result, we prefer to divide our secrets into individual pieces to increase security and grant specific access permissions to certain secrets, systems, or individuals. However, this approach results in higher costs. Therefore, we have been exploring ways to combine our secrets into groups to reduce expenses and simplify management. Nonetheless, we acknowledge that this issue may not be related to the secret manager's functionality."
  • "The solution is expensive."
  • "We purchase a monthly license for the product."
  • "The cost is somewhat high."
  • More AWS Secrets Manager Pricing and Cost Advice →

  • "This solution is expensive."
  • "The price of this solution is expensive."
  • "This product is very expensive."
  • "CyberArk is very expensive and there are additional fees for add-ons."
  • "It's per-company, license-based."
  • "It's an affordable platform."
  • "Licensing fees are paid on a yearly basis."
  • "Quite expensive"
  • More CyberArk Enterprise Password Vault Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
    787,033 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governance… more »
    Top Answer:HashiCorp Vault was designed with your needs in mind. One of the features that makes this evident is its ability to work as both a cloud-agnostic and a multi-cloud solution. As a cloud-agnostic… more »
    Top Answer:The most valuable feature of AWS Secrets Manager is its seamless integration with various AWS services.
    Top Answer:The password protection itself is the most important feature. It's something we didn't have before.
    Top Answer:It is expensive, but the cost is justified considering the security it provides. Compared to other solutions, it is costly. We have not tried other solutions, but the price is high. We only license… more »
    Top Answer:The session monitoring and recording feature is also a good feature feature, but we're currently experiencing an issue with session monitoring not working correctly. We're working with CyberArk to… more »
    Ranking
    Views
    15,396
    Comparisons
    13,600
    Reviews
    9
    Average Words per Review
    334
    Rating
    8.8
    Views
    7,194
    Comparisons
    4,460
    Reviews
    15
    Average Words per Review
    545
    Rating
    8.4
    Comparisons
    Learn More
    Overview

    AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.

    CyberArk Enterprise Password Vault, a vital component of the CyberArk Privileged Access Manager Solution (PAM), is designed to create, secure, rotate, and control access to privileged accounts and credentials used to access systems throughout an enterprise IT ecosystem. CyberArk Enterprise Password Vault enables enterprise organizations to better understand the scope of their privileged account risks and put controls in place to prevent malicious or inappropriate account or credential access.

    CyberArk Enterprise Password Vault uses a Central Policy Manager protocol (CPM) to perform the basic password management functions.

    • Verify Password Task - The CPM will pull the password from the vault and use it to log into the application or device to verify that the password is indeed correct and satisfies all the password safety protocols.
    • Change Password Task - The CPM will pull the password from the vault and create a new password that meets all preset protocols. It will send it to the device or application and then begin the process of changing it, using the same method that might be performed manually. The CPM will then update the password in the vault.
    • Reconcile Password Task - This task is utilized when there is a failure in either the Verify Password Task or the Change Password Task. Using a pre-established reconcile account from the vault, the CPM will use the reconcile account credentials to reset or fix problematic password issues due to changed passwords not being updated properly, new accounts being established, or any other failure with the above tasks.

    Enterprise organizations can utilize the easily adaptable policies and protocols to enforce granular privileged access controls, automate workflows, and rotate passwords at prescribed regular intervals without requiring any manual IT effort. Additionally, to satisfy compliance regulations, organizations can easily generate reports to prove that passwords are being changed regularly according to guidelines, meet strict password safety protocols, and report on which users accessed what privileged accounts, when, why, and what device they were using. Enterprise organizations can know at all times that data has remained secure at all times. CyberArk Password Vault will have enterprise organizations audit-ready at all times, keeping them safe and secure from risks while maximizing productivity and profitability.

    Reviews from Real Users

    Irma S., a program manager at a HR/Recruiting firm, said, "I love how easily we could operate within Password Vault and get things done. It was almost effortless."

    Another user, who is a security delivery analyst at a computer software company, relates that CyberArk Password Vault offers, “Good policy configuration and tech support.”



    Sample Customers
    Autodesk, Clevy, Stackery
    AstraZeneca, Time, DBS, Novartis, Motorola, BT, pwc, Braun, Deloitte, Williams, Revlon, Belgacom, Barclays
    Top Industries
    REVIEWERS
    Computer Software Company50%
    Retailer13%
    Energy/Utilities Company13%
    Manufacturing Company13%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm15%
    Manufacturing Company8%
    Insurance Company6%
    REVIEWERS
    Financial Services Firm30%
    Computer Software Company19%
    Comms Service Provider14%
    Energy/Utilities Company5%
    VISITORS READING REVIEWS
    Financial Services Firm24%
    Computer Software Company11%
    Insurance Company7%
    Government7%
    Company Size
    REVIEWERS
    Small Business50%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise14%
    Large Enterprise66%
    REVIEWERS
    Small Business19%
    Midsize Enterprise22%
    Large Enterprise59%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise11%
    Large Enterprise74%
    Buyer's Guide
    AWS Secrets Manager vs. CyberArk Enterprise Password Vault
    May 2024
    Find out what your peers are saying about AWS Secrets Manager vs. CyberArk Enterprise Password Vault and other solutions. Updated: May 2024.
    787,033 professionals have used our research since 2012.

    AWS Secrets Manager is ranked 2nd in Enterprise Password Managers with 12 reviews while CyberArk Enterprise Password Vault is ranked 4th in Enterprise Password Managers with 48 reviews. AWS Secrets Manager is rated 8.8, while CyberArk Enterprise Password Vault is rated 8.4. The top reviewer of AWS Secrets Manager writes "Seamlessly integrates with various AWS services while offering reasonable pricing". On the other hand, the top reviewer of CyberArk Enterprise Password Vault writes "Helps to store system accounts ". AWS Secrets Manager is most compared with Azure Key Vault, HashiCorp Vault, 1Password, Delinea Secret Server and BeyondTrust Password Safe, whereas CyberArk Enterprise Password Vault is most compared with Azure Key Vault, HashiCorp Vault, Delinea Secret Server, BeyondTrust Password Safe and LastPass. See our AWS Secrets Manager vs. CyberArk Enterprise Password Vault report.

    See our list of best Enterprise Password Managers vendors.

    We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.