Governance
8 posts
-
AWS WAF pricing and what it costs (2026)
Ten million requests cost $6. The nineteen WAF rules inspecting them cost $19. Plus two overage meters that live in a footnote.
-
AWS Budgets vs Cost Anomaly Detection (2026)
They catch different failures, and only Budgets sees AWS Marketplace charges. Detection lags, monitor types, and what to run.
-
Secrets Manager vs Parameter Store (2026)
AWS prices 1,500 secrets at $604.50 a month in Secrets Manager. Standard Parameter Store parameters are free. Plus a tier change you cannot undo.
-
AWS Cost Optimization Hub: the gaps (2026)
EKS spend counts toward Cost Optimization Hub's efficiency score but generates no recommendations, so a wasteful cluster raises the number.
-
AWS CloudTrail pricing and costs (2026)
CloudTrail's first copy of management events is free; the second costs $2.00 per 100,000, twenty times the rate of S3 data events.
-
GuardDuty bills flow logs you never made (2026)
GuardDuty analyses an independent duplicate stream of VPC Flow Logs, so deleting your own changes nothing. Plus the per-Region trial trap.
-
What AWS Config actually costs (2026)
You are billed per configuration item, and AWS confirms one is recorded even when no resource is created. Churn is the driver.
-
What CloudWatch Logs actually cost (2026)
The CloudWatch Logs Infrequent Access class halves ingestion only, removes metric filters and alarms, and can never be changed after creation.