AWS Verified Access
AWS Verified Access: A strong AWS-native choice for identity- and device-aware access with usage-based billing. Ranked #4 of 39 in Zero Trust Network Access Software by our editors (8.9/10); pricing: Paid; best for AWS-centric teams with usage-based pricing.
At a glance
- Editor score8.9 / 10
- PricingPaid
- Best forAWS-centric teams with usage-based pricing
- Free planNo
- Paid from$0.001/unit usage-based
- Access methodsBoth
- Facts checked20 Sep 2026
Where it wins
- Per-request authorization uses identity and device context
- Supports HTTP(S), TCP, SSH, and RDP access methods
- Exports OCSF logs to S3, CloudWatch Logs, and Kinesis
Where it doesn't
- Usage-based billing spans several separate pricing meters
- Cloud deployment centers operations on the AWS ecosystem
- No free plan is available for smaller evaluations
Our verdict on AWS Verified Access
AWS Verified Access controls access to corporate applications and infrastructure without requiring a VPN. It evaluates each request using user identity, device security state, and other trust data, then applies identity- and device-context policies. The service supports browser-based HTTP(S) applications alongside TCP, SSH, and RDP resources, making it relevant for teams protecting both web applications and infrastructure access. Its strongest fit is with AWS-centric organizations that want cloud-delivered access control and usage-based pricing rather than a per-user model.
Pricing is divided into four usage meters. HTTP(S) application hours cost $0.27 USD per application hour for each application associated with an active HTTP(S) endpoint, while HTTP(S) data processing costs $0.02 USD per GB. Non-HTTP endpoint hours cost $0.2 USD per endpoint hour, and non-HTTP connections beyond the included allowance cost $0.001 USD per connection hour. This structure can suit workloads that vary over time, but it requires administrators to track application hours, endpoint hours, data processing, and connection usage separately. AWS also states that standard data-transfer charges apply.
The service’s platform fit is clearest in its AWS integrations: IAM Identity Center, AWS CloudTrail, Amazon S3, CloudWatch Logs, and Kinesis Data Firehose are supported, alongside SAML and OpenID Connect identity providers. Device trust integrations include Jamf, CrowdStrike, and JumpCloud. Administrators can group applications, inherit group policies, and send access logs to AWS destinations in OCSF format. Choose AWS Verified Access when per-request evaluation, multiple access protocols, posture signals, and AWS-native logging are priorities. Teams seeking a broader deployment model or simpler per-user billing should consider alternatives.
Your product? Our editors can test AWS Verified Access in depth and publish a review, labelled as paid · from $149/mo →
AWS Verified Access pricing
All 4 AWS Verified Access plans and prices →
AWS Verified Access fact sheet
| Free plan | No |
|---|---|
| Paid from | $0.001/unit usage-based |
| Deployment model | Cloud |
| Access methods | Both |
| Device posture checks | Yes |
| Private app connectors | Not verified |
| Supported app protocols | HTTP(S), TCP, SSH, RDP |
| SIEM log export | Yes |
| Session recording | Not verified |
| Deployment | Cloud, Desktop, Browser extension, Self-hosted |
| Platforms | Web, Windows, macOS, Linux |
| Support | Docs, Tickets, Community |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 10 integrations: AWS IAM Identity Center, SAML identity providers, OpenID Connect identity providers, Jamf, CrowdStrike, JumpCloud … |
| Pricing | Paid (source) |
| Website | aws.amazon.com |
| Facts checked | 20 Sep 2026 |
AWS Verified Access integrations
AWS Verified Access lists 10 integrations on its own site.
- AWS IAM Identity Center
- SAML identity providers
- OpenID Connect identity providers
- Jamf
- CrowdStrike
- JumpCloud
- Amazon S3
- Amazon CloudWatch Logs
- Amazon Kinesis Data Firehose
- AWS CloudTrail
Alternatives to AWS Verified Access
- Cloudflare AccessBroad cloud ZTNA coverage with a free plan, clientless access, and device posture checks.9.3
- Zscaler Private AccessA broad ZTNA platform for enterprises needing application-level and privileged access controls.9.1
- Akamai Enterprise Application AccessA deep hybrid ZTNA service for complex private-app environments, with contact-sales pricing.9.0
See all AWS Verified Access alternatives →
AWS Verified Access vs the competition
- AWS Verified Access vs Cloudflare Access
- AWS Verified Access vs Zscaler Private Access
- AWS Verified Access vs Akamai Enterprise Application Access
- AWS Verified Access vs Check Point SASE Private Access
- AWS Verified Access vs Ivanti Neurons for Zero Trust Access
- AWS Verified Access vs Forcepoint ZTNA
Compare AWS Verified Access with any tool side by side →
Used AWS Verified Access? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used AWS Verified Access for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
AWS Verified Access is listed in our Zero Trust Network Access Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/aws-verified-access/"><img src="https://www.itechguides.com/best/badge/aws-verified-access.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update