Database

AWS Keyspaces

Amazon Keyspaces is a scalable, serverless Apache Cassandra-compatible database. No servers to manage — pay only for the capacity you use.

41 Compliance Frameworks → AWS CLI Library → Database Security Guide →

What is Keyspaces? (Simple Explanation)

Keyspaces is an AWS service in the Database category. Amazon Keyspaces is a scalable, serverless Apache Cassandra-compatible database.

When Would You Use Keyspaces?

  • High-scale time-series data
  • IoT device data storage
  • Gaming leaderboards and state
  • Recommendation engines
  • User profile and session stores

Who Uses Keyspaces?

From startups to enterprises, Keyspaces powers:

StartupsMid-size CompaniesLarge EnterprisesGovernmentNonprofits

What Makes Keyspaces Powerful

Cassandra Query Language (CQL) compatible
On-demand or provisioned capacity modes
Point-in-time recovery (PITR)
Encryption at rest by default
Automatic multi-AZ replication

Keyspaces Pricing & Free Tier

Free Tier: 750 hours/month of db.t2.micro (12 months), 20GB storage, 20GB backup. Pay-as-you-go from ~$0.017/hour.

Check latest pricing on AWS →

Keyspaces Best Practices

  1. 1Enable Multi-AZ deployment for production workloads
  2. 2Encrypt at rest with KMS — all RDS/DynamoDB engines support it
  3. 3Set up automated backups with at least 7-day retention
  4. 4Use IAM database authentication instead of passwords where possible
  5. 5Monitor with Performance Insights and set CloudWatch alarms on CPU >80%

Getting Started with Keyspaces in 5 Minutes

  1. 1Open the AWS Console and navigate to Keyspaces
  2. 2Click "Create database" and choose your engine (or go serverless)
  3. 3Configure instance size, storage, and Multi-AZ deployment
  4. 4Set master username/password (use Secrets Manager for production) and click "Create"

Keyspaces CLI Quick Reference

2 production-ready commands. Full CLI Library (225+ services) →

aws keyspaces helpView all Keyspaces CLI v2 commands and subcommands
aws keyspaces describe-keyspaces --helpView options for describing Keyspaces resources

Pros & Cons of Keyspaces

Pros

  • Cassandra Query Language (CQL) compatible
  • On-demand or provisioned capacity modes
  • Point-in-time recovery (PITR)
  • Encryption at rest by default
  • Automatic multi-AZ replication

Cons

  • ✕Managed databases cost more than self-hosted for predictable, steady workloads
  • ✕Cold starts on serverless databases (Aurora Serverless) can impact latency-sensitive apps
  • ✕Vendor lock-in risk — migrating large databases out of AWS is non-trivial

Keyspaces vs Alternatives

Keyspaces vs CloudWatch
Choose Keyspaces when

Choose Keyspaces for High-scale time-series data and IoT device data storage. It excels at cassandra query language (cql) compatible.

Choose CloudWatch when

Choose CloudWatch as an alternative when your requirements differ. Each service in the Database category serves different architectural patterns.

Services That Work with Keyspaces

Keyspaces is rarely used alone. It is typically combined with:

CloudWatchIAMKMSLambdaVPC

Compliance & Security

How AWS Keyspaces fits into major compliance standards. Browse all 41 frameworks →

CIS AWS v3.0

Keyspaces configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults.

NIST 800-53

Keyspaces access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families.

PCI DSS 4.0

Keyspaces encryption, access control, and logging support PCI DSS for cardholder data environments.

SOC 2

Keyspaces security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria.

ISO 27001

Keyspaces configuration and monitoring controls map to ISO 27001 Annex A information security management.

Frequently Asked Questions About Keyspaces

What is AWS Keyspaces?

Amazon Keyspaces is a scalable, serverless Apache Cassandra-compatible database. No servers to manage — pay only for the capacity you use.

What is Keyspaces used for?

Keyspaces is commonly used for: High-scale time-series data; IoT device data storage; Gaming leaderboards and state; Recommendation engines; User profile and session stores. It's a core service in the database category of AWS.

Is Keyspaces free?

Free Tier: 750 hours/month of db.t2.micro (12 months), 20GB storage, 20GB backup. Pay-as-you-go from ~$0.017/hour.

What are the key features of Keyspaces?

Keyspaces's most important capabilities include: Cassandra Query Language (CQL) compatible. On-demand or provisioned capacity modes. Point-in-time recovery (PITR). Encryption at rest by default. Automatic multi-AZ replication. Each of these is designed to help teams high-scale time-series data.

How does Keyspaces compare to alternatives?

Keyspaces competes with both AWS-native alternatives (CloudWatch, IAM, KMS) and third-party equivalents. The right choice depends on your specific requirements for scalability, cost, and operational overhead. See the comparisons section below for detailed guidance.

Which compliance frameworks apply to Keyspaces?

CIS AWS v3.0: Keyspaces configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults. NIST 800-53: Keyspaces access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families. PCI DSS 4.0: Keyspaces encryption, access control, and logging support PCI DSS for cardholder data environments. SOC 2: Keyspaces security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria. ISO 27001: Keyspaces configuration and monitoring controls map to ISO 27001 Annex A information security management.

People also search for

AWS Keyspaces tutorialKeyspaces getting startedKeyspaces best practicesKeyspaces pricingKeyspaces free tierwhat is KeyspacesKeyspaces vsKeyspaces documentationKeyspaces cheat sheetKeyspaces vs AuroraKeyspaces vs DynamoDBKeyspaces backupKeyspaces Multi-AZKeyspaces performance tuningKeyspaces migration tool

Was this page helpful?

Ready to secure your Keyspaces configuration?

Pavora continuously monitors your AWS Keyspaces for misconfigurations, compliance violations, and security risks.

Get StartedBrowse All Services