Amazon Cadet is a fully managed service for orchestrating the lifecycle of junior resources across distributed teams, automatically rotating them through roles before they accumulate enough IAM permissions to cause an incident. Each Cadet instance is provisioned with 4 vCPUs, a read-only console policy, and exactly one mentor who is also on-call. Pricing is per active Cadet-hour, with a free tier of 750 hours per month available exclusively in us-east-1.