Auth Identity · pricing · Updated September 2026
Amazon Cognito pricing (2026)
Amazon Cognito publishes no monthly price — its published figure is on another basis (annual-only, non-USD, or one-time) as checked on 2026-09-02, read from Amazon Cognito's own pricing page; 3 plans. Best for AWS-native applications using Amplify or Serverless stacks. Every figure below links to its source and the date we captured it.
At a glance
- Entry price: not priced monthly
- Free tier: Yes
- Compliance: HIPAA Yes · SOC 2 Yes · GDPR Yes
- Best for: AWS-native applications using Amplify or Serverless stacks; HIPAA-regulated workloads on AWS (Lite/Essentials/Plus all eligible); High-scale consumer apps needing pure pay-as-you-go pricing
As of · every figure below links to its source STALE · 2026-09-02
Amazon Cognito plans & pricing
| Plan | Monthly | Annual | Billing | Notes | Source |
|---|---|---|---|---|---|
| Lite STALE · 2026-09-02 | not priced monthly | — | Custom / quote | 10,000 MAUs free/mo. Above free tier: $0.0055/MAU for first 90,000 MAUs, then $0.0046/MAU. SAML/OIDC federation: 50 MAUs free, then $0.015/MAU. No flat monthly fee. | aws.amazon.com |
| Essentials STALE · 2026-09-02 | not priced monthly | — | Custom / quote | 10,000 MAUs free/mo. Above free tier: $0.015/MAU. SAML/OIDC: 50 MAUs free, then $0.015/MAU. Multi-Region replication add-on: $0.0045/MAU. No flat monthly fee. | aws.amazon.com |
| Plus STALE · 2026-09-02 | not priced monthly | — | Custom / quote | No free tier. $0.020/MAU from first MAU. SAML/OIDC: 50 MAUs free, then $0.015/MAU. M2M authorization: $0.00225–$0.002925 per token request. No flat monthly fee. | aws.amazon.com |
Last verified 2026-09-02. STALE marks a plan we have not re-checked at its source in over 30 days. Every plan above is marked — we flag rather than silently retain. https://aws.amazon.com/cognito/pricing/ accessed 2026-06-14. Amazon Cognito is listed as HIPAA-eligible on https://aws.amazon.com/compliance/hipaa-eligible-services-reference/ (accessed 2026-06-14); BAA available via AWS Artifact. Three tiers (Lite/Essentials/Plus) are account-level configurations, not plan upgrades in the traditional sense — no flat monthly fee; all billing is per-MAU. No monthly price is recorded for any tier, as there is no flat monthly commitment.
Price changes
No change record has cleared two sources yet, so nothing is published on the wire.
Capabilities
Integrations: AWS Amplify, AWS AppSync, Amazon API Gateway, Application Load Balancer, Amazon Verified Permissions, AWS Lambda, Amazon Pinpoint, AWS WAF.
Key features: Deep native integration with entire AWS ecosystem; Risk-based adaptive authentication and compromised credential detection; Branded managed login with visual no-code editor; Multi-Region replication (Essentials add-on); M2M OAuth Client Credentials flow (Plus tier).
Plan limits: Lite: 10,000 MAUs free/mo; $0.0055/MAU thereafter (first 90K); Essentials: 10,000 MAUs free/mo; $0.015/MAU thereafter; Plus: no free MAUs; $0.020/MAU from first user; SAML/OIDC federation: 50 MAUs free across all tiers, then $0.015/MAU.
Frequently asked questions
Does Amazon Cognito support HIPAA?
Yes — Amazon Cognito states HIPAA support on its public pages. Its public pages also state SOC 2 and GDPR compliance.
Does Amazon Cognito have a free plan?
Yes — Amazon Cognito publishes a free tier.
Amazon Cognito vs alternatives
Compare all auth identity · True cost of auth identity · SOC 2 claims in auth identity · HIPAA claims in auth identity · GDPR claims in auth identity · Open data · MCP
More auth identity tools
Related categories
This standing as a plaque
Amazon Cognito currently holds a bronze deskmark here — Rank 7 of 9 · Auth Identity. Anyone may show it. There is nothing to apply for, nothing to pay, and displaying it changes no score: the standing comes from the published algorithm, which never reads commission data. We never ask anyone to show it, and its link carries rel="nofollow".
The image is drawn from our live data, so it follows the standing rather than freezing it: if Amazon Cognito moves up or down a tier, the plaque on your own site says so at our next publish. Nothing is tracked beyond the ordinary web-server log that records any image request.