Contents

AmazonCognito

Each grouping represents a specific way Amazon Cognito measures and bills for resource consumption. Click into a code for additional specifications.

Amazon Cognito

User Pool MAU

CognitoUserPoolsMAU

This is the billing code for Amazon Cognito Lite MAU usage. You pay for Amazon Cognito Lite based on monthly active users (MAUs) in your user pool configured with pricing tier of Lite. A user is counted as Lite MAU if the user is active at least once in a month when the user pool pricing tier is configured as Lite and was never active when the user pool was configured as Essentials or Plus.

Billing Codes

User Pools M2M

CUPM2MTokenRequestsFull

Amazon Cognito supports machine-to-machine (M2M) use cases using the OAuth 2.0 specification’s client credentials flow. You can use Amazon Cognito to set up your service (software or an API service represented as an “app client”), establish the app client credentials, and issue access tokens in exchange for these credentials (known as token requests). These access tokens can then be used to communicate with your services. You can configure the validity of the access token for each service. You can also determine token usage per app client.

Amazon Cognito charges you along two dimensions for the M2M authorization usage. You are charged monthly per app client, prorated by the second. You are also charged monthly per successful token response. This is the billing code associated with the number of tokens per month which is priced beginning at a rate of $2.250 per 1000 token requests and has graduated tiered pricing from there.

Billing Codes

CUPM2MTokenRequestsFree

This is the billing code associated with free usage for machine-to-machine (M2M) requests.

Billing Codes

CUPM2MAppClientsFull

Amazon Cognito supports machine-to-machine (M2M) use cases using the OAuth 2.0 specification’s client credentials flow. You can use Amazon Cognito to set up your service (software or an API service represented as an “app client”), establish the app client credentials, and issue access tokens in exchange for these credentials (known as token requests). These access tokens can then be used to communicate with your services. You can configure the validity of the access token for each service. You can also determine token usage per app client.

Amazon Cognito charges you along two dimensions for the M2M authorization usage. You are charged monthly per app client, prorated by the second. You are also charged monthly per successful token response. This is the billing code associated with the number of app clients per month. Pricing begins at $6.000 per app client per month and has graduated tiered pricing from there.

Billing Codes

CUPM2MAppClientsFree

This is the billing code associated with free usage for machine-to-machine (M2M) clients.

Billing Codes

User Pool ASF MAU

CognitoASFMAU

This billing code stands for Cognito - Advanced Security Features Monthly Active User. If you enable advanced security features (ASF) for Amazon Cognito, additional prices apply for monthly active users. This includes audit mode. Pricing starts at an additional $0.050 per MAU and has graduated tiered pricing thereafter.

Billing Codes

User Pool Enterprise MAU

CognitoEnterpriseMAU

This is the billing code associated with Enterprise MAUs, specifically enterprise users who sign in through SAML or OIDC federation. For users who sign in through SAML or OIDC federation, the price for MAUs above the 50 MAU free tier is $0.015.

Billing Codes

User Pool RPS

CognitoUserAuthenticationRPSFull

Cognitio gives you the ability to pay more for higher requests per second (RPS) related to Cognito User Pool token operations. This is the billing code for higher RPS for the user authentication API.

Billing Codes

CognitoUserReadRPSFull

Cognitio gives you the ability to pay more for higher requests per second (RPS) related to Cognito User Pool token operations. This is the billing code for higher RPS for the user read API.

Billing Codes

CognitoUserResourceReadRPSFull

Cognitio gives you the ability to pay more for higher requests per second (RPS) related to Cognito User Pool token operations. This is the billing code for higher RPS for the user resource read API.

Billing Codes

CognitoUserTokenRPSFull

Cognitio gives you the ability to pay more for higher requests per second (RPS) related to Cognito User Pool token operations. This is the billing code for higher RPS for the user token API.

Billing Codes

Amazon Cognito - Plus

CognitoPlusMAU

You pay for Amazon Cognito Plus based on monthly active users (MAUs) in your user pool configured with pricing tier of Plus. A user is counted as Plus MAU if the user is active at least once in a month when the user pool pricing tier is configured as Plus. Amazon Cognito Plus costs $0.02 per MAU

Plus is geared toward customers with elevated security needs for their applications by offering threat protection capabilities against suspicious log-ins. It includes all Essentials tier features and additionally supports risk-based adaptive authentication, compromised credentials detection, and exporting user authentication event logs to analyze threat signals.

Billing Codes

Amazon Cognito - Essentials

CognitoEssentialsMAU

You pay for Amazon Cognito Essentials based on monthly active users (MAUs) in your user pool configured with pricing tier of Essentials. A user is counted as Essentials MAU if the user is active at least once in a month when the user pool pricing tier is configured as Essentials and was never active when the user pool was configured as Plus. Essentials will be the default tier for new users pools created by customers. Customers have the flexibility to switch their user pools between the Lite, Essentials, or Plus tiers anytime based on their application needs. The first 10,000 MAUs are free each month. For every MAU thereafter, the cost is $0.015 per MAU. This is the billing code that represents that charge.

Essentials offers comprehensive and flexible user authentication and access control features, allowing customers to implement secure, scalable, and customized sign-up and sign-in experiences for their application within minutes. It includes all capabilities in Lite along with supporting Managed Login and passwordless login options using passkeys, email, or SMS. Essentials also supports customizing access tokens and disallowing password reuse.

Billing Codes