ACM Certificate costs

Tensor9 BYOC planning comparisons for aws::1.0.0::acm, with backend choices shown together. Read how to think about service-adapter costs for price scope and capacity qualification, or return to additional services.

​

AWS ACM public certificates → Certificate Manager

Origin API: aws::1.0.0::acm. Target backend: google::1.0.0::certificate-manager. Planning estimate with editable assumptions. Unit rates, workload amplification and capacity assumptions are educated guesses awaiting verification. The displayed amounts are planning estimates, not verified provider list-price quotes or benchmark-qualified capacity. Region names identify the authored scenario assumptions.

​

AWS ACM public certificates · Active public certificates

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory varies independently of monthly reads and mutations. Retention remains an explicit planning assumption. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Public certificate issuance has a zero direct tariff assumption; DNS challenges, certificate hosting and durable adapter state remain separately allocated.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-168d6137ea51de31531b7d13e78d3b865c15f0df / 2026-10-18.planning.1. Curve: workload-1.

​

AWS ACM public certificates · Certificate issuances and renewals

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory remains at its authored default; issuance and renewal traffic varies independently. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Public certificate issuance has a zero direct tariff assumption; DNS challenges, certificate hosting and durable adapter state remain separately allocated.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-168d6137ea51de31531b7d13e78d3b865c15f0df / 2026-10-18.planning.1. Curve: workload-2.

​

AWS ACM public certificates → Key Vault

Origin API: aws::1.0.0::acm. Target backend: azure::1.0.0::keyvault. Planning estimate with editable assumptions. Unit rates, workload amplification and capacity assumptions are educated guesses awaiting verification. The displayed amounts are planning estimates, not verified provider list-price quotes or benchmark-qualified capacity. Region names identify the authored scenario assumptions.

​

AWS ACM public certificates · Active public certificates

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory varies independently of monthly reads and mutations. Retention remains an explicit planning assumption. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Certificate issuance is a zero direct tariff assumption; vault operations, ACME DNS challenges, hosting and durable state require separate allocation.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-21c50979198015a1fe8b833ea00c654bdcb9a531 / 2026-10-18.planning.1. Curve: workload-1.

​

AWS ACM public certificates · Certificate issuances and renewals

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory remains at its authored default; issuance and renewal traffic varies independently. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Certificate issuance is a zero direct tariff assumption; vault operations, ACME DNS challenges, hosting and durable state require separate allocation.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-21c50979198015a1fe8b833ea00c654bdcb9a531 / 2026-10-18.planning.1. Curve: workload-2.

​

AWS ACM public certificates → OCI Certificate

Origin API: aws::1.0.0::acm. Target backend: oci::1.0.0::certificate. Planning estimate with editable assumptions. Unit rates, workload amplification and capacity assumptions are educated guesses awaiting verification. The displayed amounts are planning estimates, not verified provider list-price quotes or benchmark-qualified capacity. Region names identify the authored scenario assumptions.

​

AWS ACM public certificates · Active public certificates

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory varies independently of monthly reads and mutations. Retention remains an explicit planning assumption. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Public certificate issuance has a zero direct tariff assumption; DNS challenges, certificate hosting and durable adapter state remain separately allocated.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-fb98730445fbfc8c952a6f723c42107c8ee29aef / 2026-10-18.planning.1. Curve: workload-1.

​

AWS ACM public certificates · Certificate issuances and renewals

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory remains at its authored default; issuance and renewal traffic varies independently. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Public certificate issuance has a zero direct tariff assumption; DNS challenges, certificate hosting and durable adapter state remain separately allocated.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-fb98730445fbfc8c952a6f723c42107c8ee29aef / 2026-10-18.planning.1. Curve: workload-2.

​

AWS ACM public certificates → cert-manager Certificate

Origin API: aws::1.0.0::acm. Target backend: cert-manager::1.0.0::certificate. Planning estimate with editable assumptions. Unit rates, workload amplification and capacity assumptions are educated guesses awaiting verification. The displayed amounts are planning estimates, not verified provider list-price quotes or benchmark-qualified capacity. Region names identify the authored scenario assumptions.

​

AWS ACM public certificates · Active public certificates

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory varies independently of monthly reads and mutations. Retention remains an explicit planning assumption. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Public certificate issuance has a zero direct tariff assumption; DNS challenges, certificate hosting and durable adapter state remain separately allocated.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-b9997b072d064101c5df2449030afac695fbe44e / 2026-10-18.planning.1. Curve: workload-1.

​

AWS ACM public certificates · Certificate issuances and renewals

Planning estimate with editable assumptions. These authored unit rates and capacity assumptions require provider-price verification and representative benchmarks. They do not constitute verified list-price quotes or evidence that an adapter is available. Estimated monthly service charges from native source usage; no calculator input is required. Adapter hosting and Tensor9 fees are excluded. Source: Explicit source planning region; target: Explicit target planning region; currency: USD. Exact sampled model outputs in USD/month. Difference means target minus origin; a positive difference means the target costs more. Estimated allocation from planning assumptions; not benchmark calibrated. Only discrete samples are shown. Unpriced means no target quote or cost difference is available within the sizing policy. Estimated allocation from planning assumptions; not benchmark calibrated. The sizing policy grows compute with translated work and peak headroom, memory with compute and working set, and disk with resident working state and reserve. Monthly usage is distinct from resident data; each workload’s assumptions define the translation. HA changes pricing, not this policy’s throughput estimate. Unpriced workloads exceed the policy’s configuration range; no silent vertical cap or automatic sharding is assumed.

• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Curve assumptions

• Inventory remains at its authored default; issuance and renewal traffic varies independently. Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote. Other native meters retain their explicitly displayed default quantities.
• Planning estimate · editable authored rates and sizing assumptions dated 2026-10-18; not verified provider prices. Explicit source planning region → Explicit target planning region, USD/month.
• Source prices are reference charges, not an invoice. Target lines cover selected service usage/configuration only; adapter hosting and Tensor9 fees are excluded.
• Explicit tariff samples are not performance measurements or capacity qualification. No interpolation or break-even guarantee is implied.
• Variant assumptions show the first axis sample; any axis-dependent configuration is described by this curve’s workload note.
• Editable authored planning guesses, not verified provider tariffs, benchmark measurements or a commercial quote.
• Default-zero rates are explicit assumptions, not evidence that the deployed service or resource is free.
• Provisioned-unit minimums use an editable approximate allocation floor. Modeled target service cost is max(usage/allocation, minimum), with billable network, durable staging and dependent sinks added separately; actual RU/TU sizing, scaling increments and throughput remain unqualified.
• Durable staging is priced once: provisioned targets include adapter state in their selected allocation; native targets add a separate staging allocation when required. Adapter hosting is a separate allocation and must exclude resources already priced as staging, workers or target capacity.
• A declared adapter mapping and cost model do not establish implementation availability or service equivalence.
• This is a declared directed mapping; a planning estimate does not establish deployment or request-serving support.
• Unit prices, retention, amplification, and capacity coefficients are authored planning guesses; they are editable, not current provider quotes or measured capacity.
• Public non-exportable source certificates have a zero authored source tariff. Exportable certificates and private-CA certificates require different models.
• Certificate storage, issuance polling, DNS challenges and adapter state differ from load-balancer traffic. Certificate trust and issuer availability remain backend-specific.
• The Azure native-provisioning Key Vault profile can use self-signed certificates; it must not be presented as the same public-trust workflow as the separate ACME backend.
• All target rates are editable authored planning guesses, not verified current list prices, customer discounts or benchmark evidence.
• Public certificate issuance has a zero direct tariff assumption; DNS challenges, certificate hosting and durable adapter state remain separately allocated.
• Authored operation throughput, peak and working-set assumptions are not benchmark-calibrated.
• Stored GiB already includes the origin family’s physical footprint assumptions; no second storage amplification is applied.
• The generic operations/vCPU coefficient supplies a provisional compute requirement alongside explicit resource-hour minima.
• Copies and allocation fractions change cost only; they do not increase modeled primary capacity.

Cost scope: Modeled target native service and explicitly modeled state allocation; hosting and Tensor9 fees only when supplied. Excluded costs and workload features:

• Free allowances, committed discounts, credits, taxes and negotiated rates.
• Commercial Tensor9 fees and operations labor unless entered separately.
• ACM Private CA, exportable public certificates, paid external CA fees, authoritative DNS zones/queries and load-balancer/data-transfer charges.
• Taxes, discounts, credits and free-tier allowances unless explicitly reflected in edited rates.
• Unmodeled dependent services, task execution and operations outside the selected workload family.

Planning assumptions authored: 2026-10-18. Model: plan-b9997b072d064101c5df2449030afac695fbe44e / 2026-10-18.planning.1. Curve: workload-2. See the service catalog for operation coverage, supported directions and backend limitations.