AWS Cost Anomaly Detection, Service Quotas and Trusted Advisor
1. AWS Cost Anomaly Detection
Description:
AWS Cost Anomaly Detection uses machine learning to automatically identify unusual spending patterns in your AWS account. It helps you detect cost spikes before they escalate.
Key Features:
- Creates anomaly detection monitors for linked accounts, services, or linked dimensions (e.g., region, usage type).
- Generates alerts via Amazon SNS, email, or Slack/Teams (through AWS Chatbot).
- Continuously learns your unique usage patterns (no manual thresholds needed).
Use Cases:
- Detecting sudden spend increases (e.g., a runaway EC2 instance or data transfer surge).
- Identifying unexpected usage of expensive services.
- Preventing bill shock in unpredictable environments.
2. AWS Service Quotas
Description:
AWS Service Quotas (formerly AWS Limits) allows you to view and manage quotas (limits) for AWS services centrally.
Key Features:
- Provides visibility into default and applied quotas for AWS resources.
- Enables increase requests directly in the console for many services.
- Integrates with CloudWatch metrics/alarms to notify when usage approaches quotas.
Use Cases:
- Preventing service disruptions due to hitting maximum EC2 instance or Elastic IP quota.
- Capacity planning by monitoring usage close to limits.
- Automating quota checks in CI/CD pipelines.
3. AWS Trusted Advisor
Description:
AWS Trusted Advisor is an online tool that provides real-time guidance to help you optimize your AWS environment across five categories: Cost, Performance, Security, Fault Tolerance, and Service Limits.
Key Features:
- Checks for cost optimization opportunities (idle EC2, low RDS utilization).
- Security checks (e.g., IAM root user without MFA, unrestricted security groups).
- Monitors for service limits being approached.
- Available in two levels:
- Core Checks (free): Security and service limit checks.
- Full Advisor (paid via Business/Enterprise Support): Adds performance, cost optimization, and fault tolerance.
Use Cases:
- Reducing costs by identifying unused resources.
- Improving security posture by identifying risky IAM/security group configurations.
- Ensuring resilience by checking for fault-tolerant configurations.
