Estimated cost of setting up a log metric filter and alarm on Cloudwatch

0

As a part of increasing the AWS security score, I wish to set up a log metric filter and alarm for the following actions :-

  1. Changes to network gateways
  2. Route table changes
  3. Changes to Network Access Control Lists (NACL)
  4. Security group changes
  5. VPC changes
  6. Unauthorized API calls
  7. Management Console sign-in without MFA
  8. AWS Management Console authentication failures
  9. CloudTrail configuration changes
  10. IAM policy changes
  11. S3 bucket policy changes
  12. Disabling or scheduled deletion of customer-created CMKs

There is just one root user. I wish to estimate the cost of this operation. PFA screenshot of failed controls

1개 답변
0

Hello,

Considering that you are looking into creating log metric filters [1], note that CloudWatch Logs use these metric filters to turn log data into numerical CloudWatch metrics that you can graph or set an alarm on.

For example if we were to work with 12 filters that will mean that we will be creating 12 metrics at the very least (or more). Based on pricing calculator tool you can calculate the price on your end.

https://calculator.aws/#/addService/CloudWatch

For example 12 metrics in us-east-1 will cost -

Tiered price for: 12 metrics
12 metrics x 0.3000000000 USD = 3.60 USD
Total tier cost = 3.60 USD (Metrics cost (includes custom metrics))
CloudWatch Metrics cost (monthly): 3.60 USD

For 12 standard alarms (60 seconds), you will incur the following -

12 alarms x 0.10 USD = 1.20 USD (Standard Resolution Alarms cost)
CloudWatch Dashboards and Alarms cost (monthly): 1.20 USD

For 12 High Resolution Alarm (10 seconds), you will incur the following -

12 alarms x 0.30 USD = 3.60 USD (High Resolution Alarms cost)
CloudWatch Dashboards and Alarms cost (monthly): 3.60 USD

Again, these numbers will change depending upon how many metrics you have, and the types of alarms you configure.

My recommendation here is to play around with the pricing calculator tool to get an estimate idea based on your requirements, and if you still have any queries or concerns, then please feel free to log a support case with our billing and support team directly, and they can help answer your queries further in terms of cost and pricing.

References: [1] https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/MonitoringLogData.html

profile pictureAWS
지원 엔지니어
Yash_C
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠