> do paranoid sweeps of their entire AWS account looking for rogue resources
That's the thing that annoys me the most about AWS. There's no easy way to find out all the resources I'm currently paying for (or if there's a way, I couldn't find it).
Without an easy to understand overview, it feels like I don't have full control of my own account.
You can set up daily or hourly cost and usage reports on the account. I built a finops function based on it, feeding the data into a Postgres db. Make sure to select incremental updates, if not you’ll en up paying for tb of s3 storage.
I'd like to immortalise this comment because it's exactly the kind of thing that annoys me when people say "cloud is easier" or that it requires fewer skills/people/resources.
It clearly does, it's just different skills/time/energy requirements compared to colocation.
There's some AWS resources, like for example route53 hosted zones, which bill only once at the end of the month, and so a daily or hourly bill won't tell you anything about leaked resources there.
There's at least a one resource that only bills once a year, so yet again you won't catch those with even monthly usage reports.
Also when you do these lessons with an in-person AWS trainer, they give you a specific unlimited training account that gets destroyed when the course ends.
We were billed about $5000 per month by Google even though we had asked what the billing change would mean for us and they said you will be inside the free limits. Turns out we weren't.
Even hourly isn't good enough. If I shut down some service, I want to know right now that nothing billable is left over. I don't want to have to wait an hour and come back and check only to find I forgot to clean up some IP address.
Why can we not have a "billable items" dashboard which simply shows, globally, a list of all items in your account which are billable, and how much they will cost if left running for 1 more hour/month?
What about the billing dashboard? You can break it down by service and say CPU or memory, or tags if you use them. That has always given me good enough insight into where my client's money is being spent. I'm not sure it's totally realtime, but certainly daily.
BTW I'm a supporter of spending caps, not saying this should be the only way.
Every so often, I'd get a random bill from AWS totaling to a few cents. No idea where it comes from and it's not worth the non trivial effort to find out about it. Just another reason I avoid AWS unless necessary.
Same here. And I'm worried that one month that bill will suddenly be $20k because whatever was costing a few cents suddenly gets hit by some DDoS attack.
Or that my card will expire and AWS will send that $0.03 bill to collections and slap court fees on and send a bailiff.
Their whole setup seems intended to cause expensive mistakes.
That's the thing that annoys me the most about AWS. There's no easy way to find out all the resources I'm currently paying for (or if there's a way, I couldn't find it).
Without an easy to understand overview, it feels like I don't have full control of my own account.