Security & identity
AWS WAF
- Timebilled
- Bytesnot billed
- Callsbilled
In one line
Monthly per web ACL and per rule, plus a per-request charge on everything the ACL inspects.
What gets missed
Rules are counted per web ACL, so one managed rule group attached to five ACLs bills five times. Bot Control and ATP add a monthly subscription each plus a per-request rate. Shield Advanced zeroes most of it.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
WebACLV2RuleV2RequestV2-Tier1AMR-BotControl
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.