Security & identity
AWS IAM Identity Center
- Timenot billed
- Bytesnot billed
- Callsnot billed
In one line
Permission sets, the access portal and SSO into your accounts are all free. The identity source behind them may not be.
This service turns no meters of its own. Read the trap below for what it makes you pay for elsewhere.
What gets missed
AWS Managed Microsoft AD as the identity source bills per domain controller hour, and a managed directory runs two of them. An external IdP or the built-in directory keeps the whole path at zero.
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.