Side by side
AWS IAM Access Analyzer vs Datadog Cloud Security Identity Risks
Both stand on cloud infrastructure entitlement management software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan AndroidAPIiPhone+1
AWS IAM Access Analyzer covers several permission-review tasks, with no additional charge for policy validation, policy generation, and external findings. Usage charges apply to custom checks and unused or internal access analysis.
Visit AWS IAM Access Analyzer
Free trial Web
Identity Risks combines cross-cloud detection with visibility into access paths and several remediation routes. Consider its host-based pricing and the additional AWS cost and delay associated with IAM Access Analyzer.
Visit Datadog Cloud Security Identity RisksThe facts
| AWS IAM Access Analyzer | Datadog Cloud Security Identity Risks | |
|---|---|---|
| Free plan | Yes | A free trial |
| Open source | No | Not published |
| Runs on | Android, API, iPhone, Web | Web |
| Lowest paid plan | See the plans | See the plans |
| Plans published | 9 | 2 |
| Maker | Not published | Not published |
| Website | aws.amazon.com | datadoghq.com |
| On cloud infrastructure entitlement management software | #1 of 25 | #5 of 25 |
AWS IAM Access Analyzer: what it does well
- Finds external, internal, and unused access
- Generates policies from CloudTrail activity
- Validates policies against IAM best practices
- Integrates with Security Hub CSPM and EventBridge
What to know first
- Custom checks cost $0.0020 per API call
- Unused access analysis is $0.20 per role or user monthly
- Internal analysis costs $9.00 per resource per Region monthly
Datadog Cloud Security Identity Risks: what it does well
- Covers AWS, Azure, and GCP.
- Scans identity risks without an agent.
- Shows direct and indirect access paths.
- Supports workflow, Terraform, and Jira remediation.
- Offers a 14-day product-suite trial.
What to know first
- No free plan is listed.
- AWS IAM Access Analyzer can add AWS cost.
- Analyzer findings can take up to two hours to appear.
- Usual permissions-gap detection covers 90 days.
Alternatives to AWS IAM Access Analyzer Alternatives to Datadog Cloud Security Identity Risks The whole list