Management

Amazon CloudWatch Logs

Timebilled
Bytesbilled
Callsnot billed

In one line

Ingest, store, query. Each one is its own per-GB charge, and ingestion is far the largest of the three.

What gets missed

Shortening retention only trims the storage line. The gigabytes you ingested are already paid for, and every Logs Insights run charges again for the data it scans.

Find it on your bill

Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.

DataProcessing-Bytes
TimedStorage-ByteHrs
DataScanned-Bytes
VendedLog-Bytes

Bills the same way

These services turn exactly the same meters, so what you learn here transfers.