Security & identity
AWS Identity and Access Management (IAM)
- Timenot billed
- Bytesnot billed
- Callsnot billed
In one line
Free. Users, roles, policies, MFA, all of it.
This service turns no meters of its own. Read the trap below for what it makes you pay for elsewhere.
What gets missed
Access Analyzer is the part that bills. External-access analyzers cost nothing, but unused-access analyzers charge per IAM role or user monitored and internal-access analyzers charge per AWS resource, monthly.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
AccessFinding-Monitored-IAM-ResourcesAccessFinding-Monitored-AWS-Resources
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.