Amazon Cognito pricing

Get started for free
Request a pricing quote

Pricing overview

With Amazon Cognito, you pay only for what you use. There are no minimum fees and no upfront commitments. Amazon Cognito charges for identity management and data synchronization, and the pricing for these features are described below.

        

Amazon Cognito offers you three pricing tiers to choose from when configuring your user pools, each priced based on your usage:

  • Lite provides basic user registration, authentication, and management capabilities, including social identity and SAML/OIDC provider integration, and password-based authentication. Lite is targeted for value-oriented use-cases. It includes all Cognito user pool capabilities (without advanced security features) available before November 22, 2024.
  • Essentials offers comprehensive and flexible user authentication and access control features, allowing customers to implement secure, scalable, and customised sign-up and sign-in experiences for their application within minutes. It includes all capabilities in Lite along with supporting Managed Login and passwordless login options using passkeys, email, or SMS. Essentials also supports customising access tokens and disallowing password reuse.
  • Plus is geared toward customers with elevated security needs for their applications by offering threat protection capabilities against suspicious log-ins. It includes all Essentials tier features and additionally supports risk-based adaptive authentication, compromised credentials detection, and exporting user authentication event logs to analyze threat signals.

Additionally, Cognito supports machine-to-machine (M2M) authorization and higher requests per second (RPS) as add-ons, each priced based on your usage.

Note:

  1. Essentials will be the default tier for new users pools created by customers. Customers have the flexibility to switch their user pools between the Lite, Essentials, or Plus tiers anytime based on their application needs.
  2. Customers are eligible to upgrade their user pools without advanced security features (ASF) in their existing accounts to Essentials and pay the same price as Cognito user pools until November 30, 2025. To be eligible, customers' accounts must have had at least 1 monthly active user (MAU) in the last 12 months on or before 10:00am Pacific Time, November 22, 2024. These customers are also eligible to create new user pools with Essentials tier at the same price as Cognito users pools in those accounts until November 30, 2025.
  3. Customers with ASF enabled in their user pools will continue paying based on the existing Cognito ASF price. Customers using ASF in Amazon Cognito should consider the Plus tier, which includes all ASF capabilities, additional capabilities such as passwordless log-in, and up to 60% savings compared to using ASF. 

Free Tier

Amazon Cognito Essentials and Lite have a free tier. The free tier is available to both existing and new AWS customers indefinitely. 

1. For users who sign in directly via Amazon Cognito or through a social identity provider, Amazon Cognito user pools has a free tier of 10,000 monthly active user (MAU) per month per account or per AWS organisation. This free tier is applicable for customers that configure their user pools to either the Lite or Essentials tier. There is no free tier for the Plus tier.

2. For users federated through SAML 2.0 or an OpenID Connect (OIDC) identity provider, Amazon Cognito user pools has a free tier of 50 MAUs per month per account or per AWS organisation regardless of your user pool pricing tier configuration.

3. There is no free tier for token requests when Cognito is used for the machine-to-machine use case.

Pricing table for Amazon Cognito tiers

  • Essentials

  • You pay for Amazon Cognito Essentials based on monthly active users (MAUs) in your user pool configured with pricing tier of Essentials. A user is counted as Essentials MAU if the user is active at least once in a month when the user pool pricing tier is configured as Essentials and was never active when the user pool was configured as Plus.

    Essentials will be the default tier for new users pools created by customers. Customers have the flexibility to switch their user pools between the Lite, Essentials, or Plus tiers anytime based on their application needs.

    There is separate pricing for users who sign in directly with their credentials from a user pool (includes social identity providers) and for users who sign in through an enterprise directory with SAML federation. For users who sign in through SAML or OIDC federation, the price for MAUs above the 50 MAU free tier is €0.014803.

    SMS messages for Multi-Factor Authentication (MFA)

    Separate pricing applies for sending SMS messages for Multi-Factor Authentication (MFA), user registration, password recovery, and phone number verification. Amazon Cognito uses Amazon Simple Notification Service (SNS) to send SMS messages, and you can reference Amazon SNS pricing.

    Email messages for user verification

    Separate pricing applies for sending email messages for user registration, password recovery, and email address verification. Amazon Cognito uses Amazon Simple Email Service (SES) to send email messages, and you can reference Amazon SES pricing.

    • If your Cognito user pool has 950,000 MAUs and all MAUs sign-in directly or via social identity providers, then your monthly bill will be computed as follows:

      Total number of MAUs billed above the 10,000 MAU free tier = 950,000 – 10,000 = 940,000

      Price / MAU charged above the free tier = €0.014803

      Total monthly bill = €0.014803 x 940,000 = €13,914.82

      Cognito Essentials MAU cost (monthly): €13,914.82

    • If your Cognito user pool has 950,000 MAUs and out of these MAUs, 945,000 MAUs sign-in directly or via social identity providers, and 5,000 MAUs sign-in via SAML/OIDC federation, then your monthly bill will be computed as follows:

      Bill for users signing-in directly or via social identity providers
      Total number of MAUs billed above the 10,000 MAU free tier = 945,000 – 10,000 = 935,000
      Price / MAU charged above the free tier for Essentials tier = €0.014803
      Monthly bill = €0.014803 x 935,000 = €13,840.81

      Bill for users signing-in via SAML/OIDC providers
      Total number of MAUs billed above the 50 MAU free tier = 5,000 - 50 = 4,950
      Price / MAU charged above the free tier for login via SAML/OIDC providers = €0.014803
      Monthly bill = €0.014803 x 4,950 = €73.27

      Total Cognito monthly bill = €13,840.81 + €73.27 = €13,914.08

  • Plus

  • You pay for Amazon Cognito Plus based on monthly active users (MAUs) in your user pool configured with pricing tier of Plus. A user is counted as Plus MAU if the user is active at least once in a month when the user pool pricing tier is configured as Plus.

    There is separate pricing for users who sign in directly with their credentials from a user pool (includes social identity providers) and for users who sign in through an enterprise directory with SAML federation. For users who sign in through SAML or OIDC federation, the price for MAUs above the 50 MAU free tier is €0.014803.

    SMS messages for Multi-Factor Authentication (MFA)

    Separate pricing applies for sending SMS messages for Multi-Factor Authentication (MFA), user registration, password recovery, and phone number verification. Amazon Cognito uses Amazon Simple Notification Service (SNS) to send SMS messages, and you can reference Amazon SNS pricing.

    Email messages for user verification

    Separate pricing applies for sending email messages for user registration, password recovery, and email address verification. Amazon Cognito uses Amazon Simple Email Service (SES) to send email messages, and you can reference Amazon SES pricing.

    • If your Cognito user pool has 950,000 MAUs and all MAUs sign-in directly or via social identity providers, then your monthly bill will be computed as follows:

      Total number of MAUs billed above the 0 MAU free tier = 950,000 – 0 = 950,000

      Price / MAU charged above the free tier = €0.019737

      Total monthly bill = €0.019737 x 950,000 = €18,750.15

      Cognito Plus MAU cost (monthly): €18,750.15

  • Lite

  • You pay for Amazon Cognito Lite based on monthly active users (MAUs) in your user pool configured with pricing tier of Lite. A user is counted as Lite MAU if the user is active at least once in a month when the user pool pricing tier is configured as Lite and was never active when the user pool was configured as Essentials or Plus.

    Note: 

    1. Customers with existing user pools created on or before 10:00am Pacific Time, November 22, 2024 will continue having a free tier of first 50,000 MAUs. Advanced Security Features (ASF) will continue to be priced separately and will not have a free tier.
    2. Additionally, customers are eligible to create new user pools with Lite tier in their existing accounts and count those MAUs against the free tier of first 50,000 MAUs. To be eligible, customers' accounts must have had at least 1 MAU in the last 12 months on or before 10:00am Pacific Time, November 22, 2024.

    There is separate pricing for users who sign in directly with their credentials from a user pool (includes social identity providers) and for users who sign in through an enterprise directory with SAML federation. For users who sign in through SAML or OIDC federation, the price for MAUs above the 50 MAU free tier is €0.014803. This is the same pricing as previously listed before November 22, 2024. For users who sign in directly with their credentials from a user pool (includes social identity providers), their price per MAU is listed in the table below. With the exception of free tier MAUs, the price per MAU is the same as previously listed for Cognito user pools before November 22, 2024. Refer to Notes (1) and (2) on scenarios where customers continue to have a free tier of 50,000 MAUs.

    Advanced Security Features

    If you enable advanced security features for Amazon Cognito, additional prices apply for monthly active users as shown in the table below. This includes audit mode. ASF pricing is the same as the pricing was listed before November 22, 2024.

    Advanced security features include compromised credentials detection, adaptive authentication, advanced security metrics, and access token customisation. If you enable advanced security features for Amazon Cognito, additional prices apply for monthly active users as shown in the table below. This includes audit mode.

    The prices for the advanced security features for Amazon Cognito are in addition to the base prices for active users.

    SMS messages for Multi-Factor Authentication (MFA)

    Separate pricing applies for sending SMS messages for Multi-Factor Authentication (MFA), user registration, password recovery, and phone number verification. Amazon Cognito uses Amazon Simple Notification Service (SNS) to send SMS messages, and you can reference Amazon SNS pricing.

    Email messages for user verification

    Separate pricing applies for sending email messages for user registration, password recovery, and email address verification. Amazon Cognito uses Amazon Simple Email Service (SES) to send email messages, and you can reference Amazon SES pricing.

    • If your Cognito user pool has 950,000 MAUs and all MAUs sign-in directly or via social identity providers, then your monthly bill will be computed as follows:

      Total number of MAUs billed above the 10,000 MAU free tier = 950,000 – 10,000 = 940,000

      90,000 MAUs x €0.005428 = €488.52

      850,000 MAUs x €0.00454 = €3,859

      Total monthly bill = €488.52 + €3,859 = €4,347.52

      Cognito Lite MAU cost (monthly): €4,347.52

    • If your Cognito user pool has 950,000 MAUs and all MAUs sign-in directly or via social identity providers, then your monthly bill will be computed as follows:

      Total number of MAUs billed above the 10,000 MAU free tier = 950,000 – 10,000 = 940,000

      Cognito Lite cost

      90,000 MAUs x €0.005428 = €488.52

      850,000 MAUs x €0.00454 = €3,859

      Total monthly bill = €488.52 + €3,859 = €4,347.52

      Cognito Lite MAU cost (monthly): €4,347.52

      ASF cost as add-on
      Tiered price for: 950,000 MAUs

      50,000 MAUs x €0.049343 = €2,467.15

      50,000 MAUs x €0.03454 = €1,727

      850,000 MAUs x €0.019737 = €16,776.45

      Total ASF cost per month: €2,467.15 + €1,727 + €16,776.45 = €20,970.6 (ASF MAUs)

      Advanced security feature cost (monthly): €20,970.6

      Cognito MAU cost (monthly): €4,347.52 + €20,970.6 = €25,318.12

Compare Tiers

Features Lite Essentials Plus
Basic capabilities for password-based authentication targeted for value-oriented use-cases. Additional capabilities requires customisation Core set of capabilities that enable seamless authentication for end-users such as passwordless login Enhanced set of capabilities for applications with elevated security needs

40 million users or more 

Yes

Yes

Yes

Sign-in with social, SAML, or OIDC providers 

Yes

Yes

Yes

Sign-in with username and password

Yes

Yes

Yes

MFA with authenticator apps and SMS one-time codes

Yes

Yes

Yes
Custom runtime action with Lambda triggers Yes Yes Yes
customise managed login page with CSS Yes Yes Yes
99.9% service level agreement Yes Yes Yes
customise managed login page with visual editor   Yes Yes
MFA with email one-time codes   Yes Yes
Passwordless sign-in with one-time codes   Yes Yes
Passkeys sign-in with biometrics and hardware keys   Yes Yes
Prevent reuse of previous passwords   Yes Yes
customise access token scopes and claims at runtime   Yes Yes
Support for refresh token rotation   Yes Yes
Protect against malicious sign-in attempts     Yes
Log and analyze threat profiles and user activity     Yes
Risk-based adaptive authentication     Yes
Compromised credentials detection to protect against unsafe passwords     Yes
Export threat profiles and user activity     Yes
Machine-to-machine authorization Add-on Add-on Add-on
Higher API RPS quota Add-on Add-on Add-on

Pricing table for Amazon Cognito add-ons

  • API quotas

  • You can request higher requests per second (RPS) rates in Amazon Cognito for the API categories defined in the table below. To request increased RPS rates for one or more API categories, or for more information on the individual APIs in each API category, please refer to the documentation. RPS rate increases are subject to approval by AWS.

    The prices for higher quotas are in addition to the base prices for monthly active users and any other features including Advanced Security Features. Minimum duration for higher quotas is 1 day.
     

    Prices are per 1 RPS of incremental capacity over default quotas per month. Each API Category is charged separately. 

     

  • M2M authorization

  • Amazon Cognito supports machine-to-machine (M2M) use cases using the OAuth 2.0 specification’s client credentials flow. You can use Amazon Cognito to set up your service (software or an API service represented as an “app client”), establish the app client credentials, and issue access tokens in exchange for these credentials (known as token requests). These access tokens can then be used to communicate with your services. You can configure the validity of the access token for each service. You can also determine token usage per app client.

    * Please contact your account team if you require over 2,500 app clients.

Monthly active user (MAU) computation

A user is counted as a MAU if, within a calendar month, customers’ application generates an identity operation for that user, like administrative creation or update, sign-up, sign-in, sign-out, token refresh, password change, a user account attribute update, or an attribute query on a user (AdminGetUser API). Customers are not charged for subsequent sessions or for inactive users within that calendar month. In a calendar month when a customer changes their User Pool pricing tier configuration to either Lite, Essentials, or Plus, the monthly bill will be computed as the sum of monthly active users (MAUs) in each tier with each distinct MAU being attributed to the highest-priced tier that was enabled during the user's activity.

  • Lite MAU: A user that was active at least once in a month when the user pool pricing tier was configured as Lite and was never active when the user pool was configured as Essentials or Plus.
  • Essentials MAU: A user is counted as Essentials MAU if the user is active at least once in a month when the user pool pricing tier is configured as Essentials and was never active when the user pool was configured as Plus.
  • Plus MAU: A user that was active at least once in a month when the user pool pricing tier was Plus.
Page-Illo_PricingCalculator_Wallet_1x

AWS Pricing Calculator

Estimate your Amazon Cognito costs with the Pricing Calculator

Create your custom estimate now »