Cost Anomaly Detection Configuration

AWS Cost Anomaly Detection finds unusual spend. The configuration that catches real anomalies without noise.

Setup

One monitor per service or per team. Granular enough to be actionable.

Severity threshold: $100/day or 30% above baseline. Tuneable.

Alerting

Alerts to the team that owns the service. Not central finance.

Daily summary in chat: one alert per anomaly across the org.

Response

Each alert: explained or ticketed. Within 24 hours.

Patterns emerge; some anomalies become known and suppressed.