Database

AWS QLDB

Amazon Quantum Ledger Database (QLDB) is a fully managed ledger database with a built-in immutable journal. Track every data change with cryptographic verification.

41 Compliance Frameworks → AWS CLI Library → Database Security Guide →

What is QLDB? (Simple Explanation)

QLDB is an AWS service in the Database category. Amazon Quantum Ledger Database (QLDB) is a fully managed ledger database with a built-in immutable journal.

When Would You Use QLDB?

  • System of record applications
  • Financial ledger and transaction history
  • Supply chain tracking
  • HR and payroll records
  • Insurance claims processing

Who Uses QLDB?

From startups to enterprises, QLDB powers:

StartupsMid-size CompaniesLarge EnterprisesGovernmentNonprofits

What Makes QLDB Powerful

Immutable and cryptographically verifiable journal
SQL-compatible API for queries
Built-in document data model
Serverless — no capacity management
Streams to Kinesis for real-time analytics

QLDB Pricing & Free Tier

Free Tier: 750 hours/month of db.t2.micro (12 months), 20GB storage, 20GB backup. Pay-as-you-go from ~$0.017/hour.

Check latest pricing on AWS →

QLDB Best Practices

  1. 1Enable Multi-AZ deployment for production workloads
  2. 2Encrypt at rest with KMS — all RDS/DynamoDB engines support it
  3. 3Set up automated backups with at least 7-day retention
  4. 4Use IAM database authentication instead of passwords where possible
  5. 5Monitor with Performance Insights and set CloudWatch alarms on CPU >80%

Getting Started with QLDB in 5 Minutes

  1. 1Open the AWS Console and navigate to QLDB
  2. 2Click "Create database" and choose your engine (or go serverless)
  3. 3Configure instance size, storage, and Multi-AZ deployment
  4. 4Set master username/password (use Secrets Manager for production) and click "Create"

QLDB CLI Quick Reference

2 production-ready commands. Full CLI Library (225+ services) →

aws qldb helpView all QLDB CLI v2 commands and subcommands
aws qldb describe-qldb --helpView options for describing QLDB resources

Pros & Cons of QLDB

Pros

  • Immutable and cryptographically verifiable journal
  • SQL-compatible API for queries
  • Built-in document data model
  • Serverless — no capacity management
  • Streams to Kinesis for real-time analytics

Cons

  • ✕Managed databases cost more than self-hosted for predictable, steady workloads
  • ✕Cold starts on serverless databases (Aurora Serverless) can impact latency-sensitive apps
  • ✕Vendor lock-in risk — migrating large databases out of AWS is non-trivial

QLDB vs Alternatives

QLDB vs Kinesis
Choose QLDB when

Choose QLDB for System of record applications and Financial ledger and transaction history. It excels at immutable and cryptographically verifiable journal.

Choose Kinesis when

Choose Kinesis as an alternative when your requirements differ. Each service in the Database category serves different architectural patterns.

Services That Work with QLDB

QLDB is rarely used alone. It is typically combined with:

KinesisLambdaIAMCloudWatchKMS

Compliance & Security

How AWS QLDB fits into major compliance standards. Browse all 41 frameworks →

CIS AWS v3.0

QLDB configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults.

NIST 800-53

QLDB access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families.

PCI DSS 4.0

QLDB encryption, access control, and logging support PCI DSS for cardholder data environments.

SOC 2

QLDB security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria.

ISO 27001

QLDB configuration and monitoring controls map to ISO 27001 Annex A information security management.

Frequently Asked Questions About QLDB

What is AWS QLDB?

Amazon Quantum Ledger Database (QLDB) is a fully managed ledger database with a built-in immutable journal. Track every data change with cryptographic verification.

What is QLDB used for?

QLDB is commonly used for: System of record applications; Financial ledger and transaction history; Supply chain tracking; HR and payroll records; Insurance claims processing. It's a core service in the database category of AWS.

Is QLDB free?

Free Tier: 750 hours/month of db.t2.micro (12 months), 20GB storage, 20GB backup. Pay-as-you-go from ~$0.017/hour.

What are the key features of QLDB?

QLDB's most important capabilities include: Immutable and cryptographically verifiable journal. SQL-compatible API for queries. Built-in document data model. Serverless — no capacity management. Streams to Kinesis for real-time analytics. Each of these is designed to help teams system of record applications.

How does QLDB compare to alternatives?

QLDB competes with both AWS-native alternatives (Kinesis, Lambda, IAM) and third-party equivalents. The right choice depends on your specific requirements for scalability, cost, and operational overhead. See the comparisons section below for detailed guidance.

Which compliance frameworks apply to QLDB?

CIS AWS v3.0: QLDB configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults. NIST 800-53: QLDB access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families. PCI DSS 4.0: QLDB encryption, access control, and logging support PCI DSS for cardholder data environments. SOC 2: QLDB security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria. ISO 27001: QLDB configuration and monitoring controls map to ISO 27001 Annex A information security management.

People also search for

AWS QLDB tutorialQLDB getting startedQLDB best practicesQLDB pricingQLDB free tierwhat is QLDBQLDB vsQLDB documentationQLDB cheat sheetQLDB vs AuroraQLDB vs DynamoDBQLDB backupQLDB Multi-AZQLDB performance tuningQLDB migration tool

Was this page helpful?

Ready to secure your QLDB configuration?

Pavora continuously monitors your AWS QLDB for misconfigurations, compliance violations, and security risks.

Get StartedBrowse All Services