Governance
11 posts
-
AWS Shield Advanced pricing and cost (2026)
AWS Shield Advanced is $3,000 a month on a 1-year term. Its base WAF inclusion only matches that fee near 5 billion requests. DDoS credits pay only Shield.
-
AWS Security Hub pricing: two models (2026)
Security Hub bills $3.75 per resource unit in US East (N. Virginia), while Security Hub CSPM bills per security check plus separately priced AWS Config items.
-
AWS WAF pricing and what it costs (2026)
Ten million requests cost $6. The nineteen WAF rules inspecting them cost $19. Plus two overage meters that live in a footnote.
-
AWS Budgets vs Cost Anomaly Detection (2026)
They catch different failures, and only Budgets sees AWS Marketplace charges. Detection lags, monitor types, and what to run.
-
Secrets Manager vs Parameter Store (2026)
AWS prices 1,500 secrets at $604.50 a month in Secrets Manager. Standard Parameter Store parameters are free. Plus a tier change you cannot undo.
-
AWS Cost Optimization Hub: the gaps (2026)
EKS spend counts toward Cost Optimization Hub's efficiency score but generates no recommendations, so a wasteful cluster raises the number.
-
AWS CloudTrail pricing and costs (2026)
CloudTrail's first copy of management events is free; the second costs $2.00 per 100,000, twenty times the rate of S3 data events.
-
AWS tag policies do not require tags (2026)
A tag policy never blocks an untagged resource. Enforcement mode covers 343 of 1,493 resource types, and the tag still has to be activated to reach your bill.
-
GuardDuty bills flow logs you never made (2026)
GuardDuty analyses an independent duplicate stream of VPC Flow Logs, so deleting your own changes nothing. Plus the per-Region trial trap.
-
What AWS Config actually costs (2026)
You are billed per configuration item, and AWS confirms one is recorded even when no resource is created. Churn is the driver.
-
What CloudWatch Logs actually cost (2026)
The CloudWatch Logs Infrequent Access class halves ingestion only, removes metric filters and alarms, and can never be changed after creation.