Identity is now the cloud security perimeter. With every new cloud service or application that is adopted and with every new employee hired comes an increase in security risk. Over time, cloud environments become a web of identities and complex manage, govern and secure. Effective access control is critical to reduce identity risk, but unfortunately comes with implementation challenges: slow and manual request processes, friction in engineering workflows and scalability problems. Common Fate is an authorization engine for internal access, which automates cloud access for engineers using centralised context and workflows.
Highlights
Just-in-time access workflow for AWS and GCP.
Advanced policy layer powered by Cedar: Allows for conditional approval based on user and resource attributes, such as tags associated with an account.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers one contract option. You pay a set fee that bundles the software license, vendor support, and capacity for up to 60 active users. Pricing is packaged as a single unit, so the license, support, and user allowance are billed together rather than as separate add-ons. Your cost is tied to the 60-user ceiling built into this contract. If your active user count stays within that limit, the flat contract price applies for the term.
Top-of-mind questions for buyers
What counts as one active user under the 60-user allowance?
An active user is a person in your organization who requests or receives access through the software. Each individual connected to the platform and using access workflows counts toward the 60-user ceiling. The count reflects people who actively use the tool, not one-time or dormant accounts.
What happens to my cost if my active user count grows past 60?
This contract covers up to 60 active users for one flat fee. The 60-user ceiling is the limit built into this option. If your active user count grows beyond that, you would need to contact the vendor to arrange added capacity, since more users are not automatically covered.
What is bundled into the single contract fee besides the user allowance?
The flat fee bundles three things: the software license, vendor support, and capacity for up to 60 active users. You pay for these together as one unit rather than buying support or the license as separate add-ons. All three are included for the contract term.
docs.commonfate.io
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Common Fate support includes a response SLA, and unlimited support over private Slack channel and email.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Automated just-in-time access workflow for AWS and GCP cloud environments
Policy Engine
Advanced policy layer powered by Cedar enabling conditional approval based on user and resource attributes
Least Privilege Enforcement
Enforces least privilege access control across cloud identities and resources
Cloud Identity Security
Secures cloud identities and provides full visibility for proactive risk management
Centralized Access Automation
Automates cloud access for engineers using centralized context and workflows to reduce manual request processes
AWS-Native Policy Enforcement
Enforces least privilege through AWS-native control plane policies including Service Control Policies (SCPs) and Resource Control Policies (RCPs) applied at the organization level.
Permission Usage Intelligence
Analyzes permission usage patterns to understand how human and machine identities operate and identifies which sensitive permissions are actually required.
Default-Deny Guardrails
Applies centralized, global default-deny controls across the cloud environment that automatically apply to new identities while restricting excessive permissions and disabling unused services.
Workflow Integration
Integrates with Slack, Google Teams, Email, Jira, and ServiceNow for access request workflows and approvals without requiring adoption of new tools.
Just-in-Time Access Provisioning
Delivers temporary, session-based access to cloud resources across AWS, Azure, and GCP environments without standing privileges, dynamically provisioning permissions when needed.
Zero Standing Privileges Architecture
Eliminates permanent elevated access by implementing zero standing privileges model, reducing credential exposure and unauthorized access risks across multi-cloud environments.
Attribute-Based Access Control
Grants permissions based on identity, role, and contextual attributes, enabling fine-grained access control aligned with security requirements.
Multi-Cloud Integration
Integrates with AWS IAM, AWS IAM Identity Center, Slack, and ServiceNow to provide centralized access management and oversight across multiple cloud environments.
Native Tool Access Support
Enables developers to use familiar tools such as SSH clients and web consoles directly without requiring jump servers or extensive approval workflows.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.