GO
Go. The unexplained movers alone are worth an investigation.
Unexplained top-3 movers: $15,830/mo = 9.2% · Threshold for go: 5% of monthly spend.
$171,42030-day spend
$15,830/moUnexplained top-3 movers · 9.2%
3Anomalies (90 days) · $4,980
$6,120/moCOH recommendations
Daily cost, last 30 dayspeak $6,833/day
What AWS already explains
Cost Optimization Hub lists $6,120/month of recommendations (Rightsize: $3,210, Stop: $1,640, Delete: $870, PurchaseSavingsPlans: $400). Cost Anomaly Detection: 3 anomalies in 90 days, impact $4,980. Savings Plans coverage 71.4% · utilization 96.2% (30 days)
| Anomaly | Impact | Root cause AWS gives |
|---|
| 2026-09-14 → 2026-09-16 | $2,640 | Amazon Elastic Compute Cloud - Compute, EUC1-BoxUsage:m6i.4xlarge, eu-central-1 |
| 2026-09-22 → 2026-09-22 | $1,410 | Amazon Relational Database Service, EUC1-InstanceUsage:db.r6g.2xl, eu-central-1 |
| 2026-10-01 → 2026-10-02 | $930 | Amazon Simple Storage Service, EUC1-Requests-Tier1, eu-central-1 |
Cost Anomaly Detection stops at service, account, region and usage type. It does not name the alert rule, the service account, the deploy or the team.
Largest movers AWS did not flag
Usage types whose daily cost in the last 14 days is at least 30% and $20/day above the previous 28 days, and that no anomaly root cause covers.
| Usage type | Before | Now | Change |
|---|
| EUC1-DataScannedInTB | $281/day | $641/day | +$10,800/mo |
| EUC1-DataProcessing-Bytes | $142/day | $266/day | +$3,720/mo |
| EUC1-NatGateway-Bytes | $77/day | $121/day | +$1,310/mo |
| EUC1-TimedStorage-ByteHrs | $60/day | $86/day | +$780/mo |
Service-level movers
| Service | Before | Now | Change |
|---|
| Amazon Athena | $320/day | $1,012/day | +$20,760/mo |
| AmazonCloudWatch | $330/day | $480/day | +$4,500/mo |
| EC2 - Other | $250/day | $340/day | +$2,700/mo |
Top 8 services, 30 days
Amazon Elastic Compute Cloud - Compute$61,200
Amazon Elastic Container Service for Kubernetes$24,900
Amazon Athena$21,300
Amazon Relational Database Service$18,700
AmazonCloudWatch$12,400
Amazon Simple Storage Service$9,800
EC2 - Other$8,900
Amazon DynamoDB$5,600
What an investigation would do
For each unexplained mover: pull the CloudTrail events and query history behind it, name the principal, the rule or the config change, hand you an apply-ready fix, and verify the delta on your Cost and Usage Report. You pay only on verified net savings: 10% on the first $10k a month, then 7%, 5%, 4%; nothing on commitments; nothing after 12 months; no fixed fees.