Unlike the external access analyzer, IAM Access Analyzer unused access analyzer is a paid feature. The service charges are based on the number of IAM roles and users analyzed per analyzer per month.

While IAM is used to authenticate individuals, it still relies on the native Kubernetes role-based access controls (RBACs) for management, which may need to be adjusted.