AWS BillExplained
← Services

Security & identity

Amazon Cognito

  • Timebilled
  • Bytesnot billed
  • Callsbilled

In one line

User pools bill per monthly active user. Machine-to-machine tokens sit on a separate per-request meter.

What gets missed

Identity pools are free; user pools are not. A client_credentials token request never counts as an MAU and there is no longer any per-app-client fee. Moving Lite to Essentials or Plus reprices every user.

Find it on your bill

Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.

  • CognitoLiteMAU
  • CognitoEssentialsMAU
  • CognitoPlusMAU
  • CUPM2MTokenRequestsFull

Bills the same way

These services turn exactly the same meters, so what you learn here transfers.