No more typing reviews! Try our Samantha, our new voice AI agent.

Amazon Cognito vs Idira Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon Cognito
Average Rating
7.6
Reviews Sentiment
6.5
Number of Reviews
17
Ranking in other categories
Access Management (11th)
Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
 

Featured Reviews

BM
Staff Software Engineer at Visa
Custom authentication has enabled secure multi-factor logins and unified access across apps
The features or capabilities of Amazon Cognito that I have found the most valuable so far include its seamless operation and the requirement of fewer integrations from the client side. All the features are there, enabling us to create the users, manage the groups, and manage access. Mostly, the access management is very good in Amazon Cognito, I would say. The benefits and positive impacts that Amazon Cognito has had in my experience include the fact that earlier we needed to implement so many things on behalf of the product itself. Now, the go-to-market strategy requires less than a week to complete integrations of the user flow, specifically mentioning that a basic authentication flow could be completed in a week itself. We don't have to care about how we manage the passwords, how we manage groups, and how we manage access management because all those things are there. It's handy, the documentation is very good, and it is easy to integrate. That's the reason I would say that the impact AWS is building on the product is great.
Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I appreciate Amazon Cognito's ability to scale with demand and its seamless user verification features."
"This is a scalable solution. If our app or general usage increases, this solution can support it."
"What is quite valuable is that we can outsource storage of the credentials to AWS, and they manage it quite securely."
"The most valuable feature of the solution is its swift authentication."
"What I find most valuable about Amazon Cognito is the single sign-on feature that provides a token for accessing protected APIs."
"The federation is one of the most efficient features as the pricing is competitive."
"I rate Amazon Cognito nine out of ten."
"One of the key benefits of this software is its ease of integration with a wide range of applications, including mobile apps and web applications. This simplifies the process of integration, and it can be seamlessly incorporated with Azure, Kubernetes, and other software systems."
"It is useful for protecting passwords. If you need to do access security management, you can first use the CyberArk console, and after that, you can connect the firewall interface or firewall command line. Similarly, if you need to do an RDP session, you need to first log in to CyberArk before connecting to the Windows RDP session. This way, the admin doesn't know the password, and that password is changed immediately. To change the password, you first discover the old password in the network, and after that, you can change the password."
"Password Vault's policy configuration is very good - when you receive an attack, you can segment the structure of the project in order to isolate parts or users."
"CyberArk Privileged Access Manager has been helpful in managing over 125,000 privileged accounts in a single environment for our client, and we have multiple CyberArk environments for different clients with different numbers of accounts."
"This solution works very well, and the feedback from our customers is very good."
"The product has allowed us to improve both the management and access to privileged credentials, while also creating a full audit trail of all activities happening within isolated sessions of all tasks and activities taking place within the solution."
"The most valuable features of CyberArk Privileged Access Manager are its robust functionality and reliability."
"It provides a one-stop shop for the majority of our administrators to get the privileged access they need."
"CyberArk PAS provides isolated and recorded sessions for third-party/outsourced admin access."
 

Cons

"The MFA related to the solution's side is nonexistent."
"I think Amazon Cognito provides less flexibility to customize at the moment."
"The ease and simplicity of integration could be improved when using this solution. When using Okta, scope is a single endpoint with a parameter as a scope, but in Cognito, for each scope, there is a separate endpoint."
"I would rate its scalability as five out of ten. Moving users between different pools or accounts creates new identities, which means IDs stored in our database must also be changed."
"Cognito triggers can improve by providing more direct use cases rather than giving a white paper. A white paper is not at all interesting, it has too many details. It would be a benefit to provide a smaller document that is summarized. The smaller version would bring microdata, macro data is not helpful."
"Amazon Cognito’s UI needs improvement while onboarding new users."
"The setup and configuration can be complex, especially for advanced use cases."
"The secure authentication of Amazon Cognito has benefited our company. We were previously using legacy signup systems."
"There is some stuff that we still have not fully integrated, which is our AIM solution. We are having all types of issues with it. I have been working with Level 3 support on it, but otherwise, from a functionality perspective, everything has been working except for the AIM solution."
"The solution is too complicated to use and should be simplified. It took me a long time to understand how to use it. There is a lot that the solution can improve for the future."
"A notable request I have regarding CyberArk Privileged Access Manager is to address the issues of database corruption identified in cluster environments experienced by multiple clients."
"They are taking two to three days for resolution are too slow. Customers, including myself, do not want to wait this long for solutions."
"Make it easier to deploy."
"More than the product itself, there is room for improvement in the documentation."
"If you are an administrator or architect, then the solution is kind of complicated, as it is mostly focused on the end user. So, they need to also focus on the people who are implementing it."
"We had an issue with the Copy feature... Apparently, in version 10, that Copy feature does not work. You actually have to click Show and then copy the password from within Show and then paste it. We've had a million tickets and we had to figure out a workaround to it."
 

Pricing and Cost Advice

"The product is relatively inexpensive compared to other tools."
"The pricing is bad so I rate it a two out of ten."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"The price of the solution depends on the number of users using it."
"We pay $600 monthly per user for licences and there are no other additional costs."
"The price of Amazon Cognito is low. The pricing model is based on the users."
"The pricing of this solution is good compared to other solutions on the market."
"The price of Amazon Cognito is expensive. We are on an annual subscription."
"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
"There are additional features added to our CyberArk Privileged Access Manager license. For example, features that allow us to integrate into various kinds of platforms."
"With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time."
"Pricing and licensing depend on the environment."
"CyberArk Enterprise Password Vault is a very expensive product."
"It's per-company, license-based."
"I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing concerns."
"The cost is high compared to other products."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
11%
Construction Company
9%
Manufacturing Company
8%
Financial Services Firm
8%
Financial Services Firm
12%
Manufacturing Company
10%
Outsourcing Company
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise5
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
 

Questions from the Community

What is your experience regarding pricing and costs for Amazon Cognito?
I am aware that the pricing of Amazon Cognito is not managed by me directly but is managed by some other teams, specifically the DevOps teams. As far as I know, it is based on how many users we hav...
What needs improvement with Amazon Cognito?
I think Amazon Cognito provides less flexibility to customize at the moment. It is very tightly coupled with its own services, so it does not provide customization according to what the client need...
What is your primary use case for Amazon Cognito?
The usual use cases for Amazon Cognito that I have been working with mostly involve working for TLG Apps for three and a half years, where TLG Apps is a FinTech company in the UK. We were working f...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...
 

Also Known As

No data available
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
Rockwell Automation
Find out what your peers are saying about Amazon Cognito vs. Idira Privileged Access Manager and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.