With Amazon Cognito, you pay only for what you use. There are no minimum fees and no upfront commitments. Amazon Cognito charges for identity management and data synchronization, and the pricing for these features are shown below.

Cognito User Pools

If you are using Cognito Identity to create a User Pool, you pay based on your monthly active users (MAUs) only. A user is counted as a MAU if, within a calendar month, there is an identity operation related to that user, such as sign-up, sign-in, token refresh or password change. You are not charged for subsequent sessions or for inactive users within that calendar month.

There is separate pricing for users who sign in directly with their credentials from a User Pool and for users who sign in through an enterprise directory through SAML federation.

The Cognito Your User Pool feature has a free tier of 50,000 MAUs for users who sign in directly to Cognito User Pools and 50 MAUs for users federated through SAML 2.0 based identity providers. The free tier does not automatically expire at the end of your 12 month AWS Free Tier term, and it is available to both existing and new AWS customers indefinitely.

Users who sign in directly with their User Pool credentials:

For users who sign in directly with their credentials from a User Pool, there are volume-based pricing tiers for MAUs above the free tier, as shown in the table below.

Pricing Tier (MAUs) Price per MAU
First 50,000 Free
Next 50,000 $0.00550
Next 900,000 $0.00460
Next 9,000,000 $0.00325
Greater than 10,000,000 $0.00250



Users who sign in through SAML federation:

For users who sign in through SAML federation, the price for MAUs above the 50 MAU free tier is $0.45. If you have 10,000 or more users, please contact us for your custom pricing.


SMS messages for Multi-Factor Authentication

Separate pricing applies for sending SMS messages for Multi-Factor Authentication (MFA) and phone number verification. Amazon Cognito uses Amazon Simple Notification Service (SNS) to send SMS messages, and you can reference Amazon SNS pricing.

Using the Federated Identities feature for authenticating users and generating unique identifiers is always free with Amazon Cognito.


Migrating Existing User Directories to Cognito User Pools:

For customers interested in migrating existing user directories to Amazon Cognito, please contact us to discuss your migration options including available incentive and assistance programs and support.

Many organizations may have existing infrastructure for managing user identities, authentication and authorization, but maintaining and supporting these systems and keeping them up to date with evolving best security practices can be costly and time consuming.

Consequently, many organizations are looking to take advantage of cloud-based services to replace these existing systems and are looking for guidance and help to migrate them to the AWS cloud, which manages the heavy lifting for you so you can focus on running your business.

Cognito Sync

Sync charges are based on the total amount of data saved in the Amazon Cognito sync store and the number of sync operations performed. A sync operation compares the local data store on a device to the Amazon Cognito sync store in the cloud and synchronizes the two data stores. As part of the AWS Free Tier, eligible AWS customers receive 10 GB of cloud sync store and 1,000,000 sync operations per month for the first 12 months.

Outside the Free Tier, Amazon Cognito costs $0.15 for each 10,000 sync operations and $0.15 per GB of sync store per month in all AWS regions except Asia Pacific (Tokyo). In Asia Pacific (Tokyo), the cost outside of the Free Tier is $0.19 for each 10,000 sync operations and $0.19 per GB of sync store per month. When push synchronization is enabled, standard rates for Amazon SNS apply.

If you have questions, please contact us in the forum.

Secure, Scalable, Sign-Up in Minutes.

Ready to get started?