Security & identity
AWS IAM Access Analyzer
- Timebilled
- Bytesnot billed
- Unitsbilled
In one line
External access findings are free; unused and internal access analysers bill per monitored resource a month.
What gets missed
Switching on an unused access analyser meters every IAM role and user in the account every month, and a second analyser over the same account bills those resources again. Custom policy checks are charged per API call.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
AccessFinding-Monitored-IAM-ResourcesAccessFinding-Monitored-AWS-ResourcesCustomCheck-API-Requests
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.