Amazon Verified Permissions Pricing

Amazon Verified Permissions is a scalable permissions management and fine-grained authorization service for the applications that you build. Using Cedar, an expressive and analyzable open-source policy language, developers and administrators can define policy-based access controls by using roles and attributes for more granular, context-aware access control.

With Verified Permissions, you pay only for what you use. There are no upfront fees or minimum fees. Also, there is no minimum number of authorization requests that a customer must make to use Amazon Verified Permissions. You are charged based on the number of authorization requests and policy management requests made by your application.

Authorization requests are the number of calls to the IsAuthorized API,  BatchIsAuthorized API, and IsAuthorizedWithToken API. Authorization request APIs are high-volume APIs that your application calls multiple times per user session. A single API call to BatchIsAuthorized is considered a single authorization request, irrespective of the numbers of authorizations requested as part of the API request.

Policy management requests are the total number of API calls made, including CreatePolicy, UpdatePolicy, GetPolicy, and ListPolicy APIs. Policy management APIs are called less frequently and are charged at a different rate.
 

Pricing

Region: US East (N. Virginia) – same pricing for all Regions

Pricing tier (authorization requests per month) Price per million
First 40 million requests per month $150/million authorization requests
Next 60 million requests per month $75/million authorization requests
More than 100 million requests per month $40/million authorization requests
   
Policy management requests  $40/million policy management requests

There is no minimum number of requests that you must make to use Amazon Verified Permissions. For example, if your application makes 1000 authorization requests, then you are charged for 1000 requests ($150 / 1000 requests = $0.15).

Pricing examples (monthly)

Example #1

You have 1 million active application users, each of whom accesses 40 photos per month. Each time one of these users attempts to access a photo, your application calls Verified Permissions to check if they are authorized to do so. Therefore, your application makes 40 million authorization requests per month. Additionally, 30% of your users (300,000 users) view 10 policies every month, and 10% of your users (100,000 users) update two policies every month. Your charges would be calculated as follows:

Usage type Number of requests Price per million requests Charge for the month
First 40 million authorization requests 40 million $150 40M * $150 / 1M = $6,000
Policy management actions 300,000 * 10 (GetPolicy) + 100,000 * 2 (UpdatePolicy) = 3.2 million $40 3.2M * $40 / 1M = $128
       
Total Charges: $6,128/month    
Example #2

A company with 5,000 employees is using Verified Permissions for authorization. The company has enabled authorization in five of their internal applications (e.g. sales management portal, code repo, employee information processor) that are used by by employees for day-to-day tasks. Each employee, on an average, takes 100 actions in each of the five applications on all working days. Assuming 20 working days each month, each employee takes a total of 10,000 actions each month. The company authorizes each actions using Verified Permissions which results in 50M authorization requests per month. Additionally, the company also updates permissions as employees join or leave. They manage authorization policies on an average 50 times per month per employee . Therefore, in total 250,000 policy management requests are made to Verified Permissions.  

Usage type Number of requests Price per million requests Charge for the month
First 40 million authorization requests 40 million $150 40M * $150 / 1M = $6,000
Next 60 million authorization requests 10 million $75 10M * $75 / 1M = $750
Policy management actions 250,000 $40 250K * $40 / 1M = $10
       
Total Charges: $6,760 /month    
Example #3

A popular chain restaurant operating in 3,000 locations uses Verified Permissions for authorization in their order management system. On average, each location received 300 orders every day, and each order requires 3 actions (place order, view order, complete order) to fulfill (900 requests per day per store). As a result, the application makes 27,000 authorization requests every month per store and overall makes 81M authorization requests across all stores. Your charges would be calculated as follows:  

Usage type Number of requests Price per million requests Charge for the month
First 40 million authorization requests 40 million $150 40M * $150 / 1M = $6,000
Next 60 million authorization requests 41 million $75 41M * $75 / 1M = $3,075
Total Charges: $9,075 /month    
Example #4

An order fulfillment application in a warehouse uses Amazon Verified Permissions for authorization. The application is used by 1,000 employees working in the United Kingdom (UK). They use the application to view order details, mark the order as shipped, and list orders. On average, an employee processes 500 orders everyday, and therefore visits the order detail page 500 times and marks 500 orders as shipped. Additionally, an employee lists orders 200 times in a day.

The application calls the Verified Permissions API IsAuthorized once to authorize “view order” and “updating an order to shipped”. Therefore, the application makes 1000 IsAuthorized API calls per employee in a day. Additionally, the application makes a single API request to BatchIsAuthorized when this employee lists orders. The single batch API call, gets authorization decisions to view each order in the list. Therefore, the application makes 200 BatchIsAuthorized API calls per employee in a day. In total, the application makes 1,200 authorization requests per employee in a day (1000 IsAuthorized calls and 200 BatchIsAuthorized calls). Assuming 30 workdays in a month, the monthly charges are calculated as follows:

Authorization requests per employee per day: 1,200
Authorization requests per employee per month: 1,200 * 30 days = 36,000
Authorization requests per month (total): 36,000 * 1,000 employees = 36,000,000

 

Usage type Number of requests Price per million requests Charge for the month

First 40 million authorization requests

36 million

$150

36M * $150 / 1M = $5,400

       
Total Charges: $5,400 /month    
Example #5

Your application uses Amazon Verified Permissions for permissions management. Every month, it calls the IsAuthorized API 150 million times and BatchIsAuthorized 50 million times. As a result, it performs 200 million authorization requests. Additionally, there are 10 million policy management actions every month. Your charges would be calculated as follows:

Usage type Number of requests Price per million requests Charge for the month

First 40 million authorization requests

40 million

$150

40M * $150 / 1M = $6,000

Next 60 million authorization requests

60 million
$75
60M * $75 / 1M = $4,500
Next 100 million authorization requests
 
100 million
$40
100M * $40 / 1M = $4,000

Policy management actions

10 million 

$40

10M * $40 / 1M = $400

       
Total Charges: $14,900/month    

Additional pricing resources

AWS Pricing Calculator

Easily calculate your monthly costs with AWS

Get pricing assistance

Contact AWS specialists to get a personalized quote