Amazon IAM Access Analyzer pricing

Amazon Identity and Access Management (IAM) Access Analyzer guides you toward least privilege by providing tools to set, verify, and refine permissions. IAM Access Analyzer provides access analysis findings and policy checks.

When you enable IAM Access Analyzer, you create an analyzer, which regularly checks your accounts or organization for external access. The analyzer generates public and cross-account access findings for your Amazon Web Services resources. This is provided at no additional charge.

IAM Access Analyzer also offers two types of policy checks:

• IAM Access Analyzer policy validation guides you to author and validate secure and functional policies based on IAM best practices. This is provided at no additional charge.
• IAM Access Analyzer custom policy checks validate before deployment that developer-authored policies adhere to your specified security standards. This is a paid feature. Custom policy checks use automated reasoning—provable security assurance backed by mathematical proof—so that security teams can proactively detect nonconformant updates to policies. For custom policy checks, you are charged based on the number of checks you run by calling the IAM Access Analyzer APIs.