Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Being Charged for AWS WAF even though not using this

0

Enter image description here Enter image description here Enter image description here Enter image description here

These are new images for the updates context -"I just realized that, just before checking for this Web ACL, I had already deleted the CloudFront distribution with which the Web ACL might have been associated. However, even after 20 hours of deleting CloudFront, I am still being charged for that Web ACL, and it still appears in active services.

I have attached images in the updated question. Why is this happening, and how long does it usually take for the charges to stop reflecting?"

Enter image description here Enter image description here iam being charged for AWS WAF service , even though i didn't use this service , i even tried to check out check out on WAF console , there are no Web ACL's present (in Global region and north *** both and other regions also, but in bills its clearly showing that iam being charged for this active service(which is WAF), and im already getting charged 0.37 USD for 1-3 april , please help me if anyone knows about this?---- i selected the appropriate region in both the sections [Top Right corner of the screen and the one next to the Web ACL (near the create web ACL button)] but nothings's helpingImage showing there is one active service which is WAf Enter image description here

Topics
Cloud Financial ManagementSecurity, Identity, & Compliance
Tags
AWS WAFAWS Cost and Usage ReportAWS Billing
Language
English
asked 10 months ago464 views
2 Answers
0
Accepted Answer

If you are looking at the bill for the three days of the current month, it's worth noting the Usage Quantity flagged in the bill. You can see that the charge is for 0.039 of a month, which is about a day, so I would guess that the WebACL in question does not exist any more. If you want to dig into when that WebACL was created, you should review your CloudTrail logs looking for events of type "CreateWebACL", most likely in the us-east-1 region.

AWS
answered 10 months ago
0

It's understandable that you're concerned about being charged for AWS WAF when you believe you're not using the service. This situation is not uncommon, and there are a few things to consider:

  1. Double-check all regions: Even if you've checked the Global region and other regions, make sure you've thoroughly examined all possible locations where a Web ACL might exist, including the "Global (CloudFront)" region if you've ever used CloudFront.

  2. Hidden Web ACLs: Sometimes, Web ACLs can be created as part of other services or configurations without being immediately visible. For instance, if you've set up CloudFront in the past, there might have been an option to create a WAF that you may have inadvertently enabled.

  3. Billing discrepancies: In some cases, there might be a delay or discrepancy between the actual usage and what's shown in the billing console.

Given that you're seeing charges despite not finding any Web ACLs, here are some recommended steps:

  1. Recheck the WAF console: Ensure you've selected the appropriate region in both the top right corner of the screen and next to the Web ACL (near the create web ACL button).

  2. Review CloudFront settings: If you've used CloudFront, check if there are any associated WAF settings.

  3. Contact AWS Support: If you still can't locate the source of the charges, it's advisable to contact AWS Support. They have the tools to investigate account-specific information and can help identify the root cause of the charges.

  4. Consider using AWS Firewall Manager: For future reference, AWS Firewall Manager now has features to help optimize costs by ensuring WAF web ACLs are only created in accounts with resources in scope and removing them when no longer needed.

Remember, AWS WAF does charge for Web ACLs even if they're not actively protecting resources, so it's important to remove any unused configurations to avoid unnecessary costs.
Sources
Why am I being charged for WAF service when there are no Web ACLs present in the Console? | AWS re:Post
Do you pay for WAF Web ACL, even if no resource associated? | AWS re:Post
Unexpected WAF Charges Inquiry | AWS re:Post
How to stop WAF cost bills | AWS re:Post

answered 10 months ago
AWS
EXPERT
reviewed 10 months ago
AWS
EXPERT
reviewed 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content