Security & identity
AWS Security Incident Response
- Timenot billed
- Bytesnot billed
- Unitsbilled
In one line
Per security finding ingested from GuardDuty and Security Hub, past a monthly free allowance.
What gets missed
Findings ingested drive the bill, not incidents you actually escalate, so a chatty detection integration is what costs you. The first 10,000 a month are free, and Enterprise Support and Unified Operations pay nothing.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
FindingIngested
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.