AWS IAM Access Analyzer pricing
9 plans read from aws.amazon.com
Custom policy checksFree per API checkchecks run through IAM Access Analyzer APIs · policy standards and access checks Read 14 Oct 2026 · aws.amazon.com
External access analysisFree no additional chargepublic and cross-account findings · supported AWS resources · regional analyzers Read 14 Oct 2026 · aws.amazon.com
External access analyzerFree Provided at no additional chargePublic and cross-account access findings for AWS resources Read 29 Sep 2026 · aws.amazon.com
IAM policy validationFree Provided at no additional chargeValidates policies against IAM best practices Read 29 Sep 2026 · aws.amazon.com
Policy generationFree Provided at no additional chargeGenerates fine-grained policies based on access activity captured in logs Read 29 Sep 2026 · aws.amazon.com
Unused access analysis$0.20 a month per IAM role or user analyzed per monthIAM roles and users · one analyzer across Regions in a partition Read 14 Oct 2026 · aws.amazon.com
Unused access analyzer$0.20 a month $0.20 per IAM role or IAM user per monthOne analyzer across all Regions in a partition because IAM roles and users are global Read 29 Sep 2026 · aws.amazon.com
Internal access analysis$9 a month per monitored resource per Region per monthselected business-critical resources · AWS Organizations or account scope Read 14 Oct 2026 · aws.amazon.com
Internal access analyzer$9 a month $9.00 per resource monitored per Region per monthMonitors access to business-critical AWS resources within an AWS organization Read 29 Sep 2026 · aws.amazon.com
In short
- AWS IAM Access Analyzer has a free plan (Custom policy checks).
- Paid plans published: 4, from $0.20 a month.
What the alternatives costAll alternatives →
| Tool | From | Free plan | Free trial |
|---|---|---|---|
| C3M Cloud Control | — | Yes | Yes |
| Microsoft Defender for Business | $0.25/mo | No | Yes |
| Qualys TotalCloud | — | Yes | Yes |
| Sysdig Secure | $20/mo | No | No |
| Datadog Cloud Security Identity Risks | $10/mo | No | Yes |
| Prisma Cloud SCA | — | No | Yes |
| SentinelOne Singularity Cloud Security | — | No | No |
| Britive Secrets Manager | — | No | No |