AWS AppFabric pricing

AWS AppFabric is a service that quickly connects multiple software as a service (SaaS) applications to enhance security and increase productivity. IT and security teams can more easily manage and secure applications by aggregating and normalizing log data into a central repository that is accessible to leading security tools.  

AWS AppFabric offers simple pay-as-you-go pricing for all generally available security features for the first 30 SaaS applications connected. After 31 or more applications are connected to the service, there is an incremental per user, per application fee incurred.

As part of AWS Free Tier, AppFabric for security does not charge for the first two applications selected during the first 30 days of use. Users are identified by an actor email ID, which can be a user, system, admin, or application that can be identified within audit logs or a user access search. An actor ID is a unique user across all AppFabric applications. Identified users may include users external to the organization that are interacting with apps (e.g., contractors or guests). For example, [email protected] on app-1 and [email protected] on app-2 count as the same user then AppFabric only bills once for the events generated in both applications.

Standard rates apply for any unique users identified in a third, or more, application. The rate is prorated on a daily basis during the Free Tier period. For example, if AppFabric identifies 50 unique users that are not found in the first two apps but are found for the third app during the Free Tier period, a customer is charged for only 50 users. The Free Tier period begins when customers first use AppFabric features (for example, first audit logs are ingested, or first user access search). Restrictions apply; see offer terms for more details.

$3 per user per month* volume pricing discounts are available for customers with over 2,000 users.

AppFabric pricing is for security features generally available today. After the free trial, pricing is not prorated after the month(s) affected by the free trial. For example, if you stop using AppFabric on the 10th of the month, you are billed for the full monthly rate. To learn more about AppFabric generative AI capabilities, see AWS AppFabric Features.

AppFabric is the same price across all supported AWS Regions—US East (N. Virginia), Europe (Ireland), and Asia Pacific (Tokyo)—with more coming soon. For customers with more than 10,000 users, contact our sales team for pricing.

When using AppFabric to ingest normalized audit logs into Amazon Simple Storage Service (Amazon S3) or Amazon Kinesis Data Firehose, customers are charged standard data storage and ingestion rates based on the volume of log data stored. This applies even during the free trial period for AppFabric. Customers can choose to store their data in either Amazon S3 or pass it through Amazon Kinesis to their security tool of choice. 

A security analyst monitors 7 SaaS applications in an organization with 250 employees. They use AppFabric in the US East (N. Virginia) Region to aggregate and normalize user event logs. Log data is sent to Kinesis Data Firehose. In a given month, AppFabric captures user activity for 225 unique IDs (logs volume equals 70 GB of data). They also use the AppFabric user access feature to look up application access for 10 employees. Those 10 employees are part of the same 225 unique IDs captured in the user event logs. AppFabric is the same price for a user if they are identified in both user events and user access. The monthly bill is calculated as follows:

A security analyst monitors seven SaaS applications in an organization with 250 employees. They use AppFabric in the US East (N. Virginia) Region to aggregate and normalize user event logs. Log data is sent to Kinesis Data Firehose. In a given month, AppFabric captures user activity for 225 unique IDs (logs volume equals 70 GB of data). The monthly bill is calculated as follows:

A new customer is evaluating AppFabric for their organization (500 total employees) by completing a 60-day PoC. The PoC includes three applications supported by AppFabric, with user event data being stored in the Amazon S3 Standard storage class. On July 20, the 30-day Free Tier begins. On August 19, the 30-day Free Tier ends and the customer converts to paid usage through September 17, or once their 60-day PoC is complete.

During this time, AppFabric captures activity for 200 users that use all three applications. For the third application that exceeds the two apps limit for the Free Tier, AppFabric captures activity for 150 unique user IDs in July (user event logs volume equals 15 GB of data), 275 unique user IDs in August (logs volume equals 50 GB of data), and 210 unique user IDs in September (logs volume equals 60 GB of data). The per-month bill for this PoC is calculated as follows:

An IT administrator is responsible for adding and revoking application access for employees. To assess access quickly, the administrator uses the AppFabric user access feature in the US East (N. Virginia) Region to look up access for 20 employees in a month. The bill for the month is calculated as follows: