Examkin

Question

Difficulty: HardAWS Cost Explorer and Cost Anomaly Detection

A company's production AWS account recently experienced a sudden, unexpected spike in data transfer costs due to a misconfigured third-party application. A SysOps administrator is tasked with implementing a solution that automatically detects these types of anomalous, variable cost spikes using machine learning and immediately triggers an AWS Systems Manager Automation runbook to restrict outbound network traffic. Which solution will meet these requirements with the least operational overhead?

  1. Create an AWS Cost Anomaly Monitor using the AWS services monitor type. Create an Amazon EventBridge rule that filters for events originating from the AWS Cost Anomaly Detection service, and configure the rule to target the AWS Systems Manager Automation runbook.Answer
  2. B
    Create an AWS Budget with a usage budget type targeting data transfer costs. Set an alert threshold at 110% of the budgeted amount, and configure a budget action to execute the AWS Systems Manager Automation runbook when the threshold is exceeded.
  3. C
    Enable billing alerts in the AWS Billing console and create an Amazon CloudWatch alarm on the EstimatedCharges metric. Configure the alarm to send a notification to an Amazon Simple Notification Service (Amazon SNS) topic, and subscribe the Systems Manager Automation runbook directly to the SNS topic.
  4. D
    Configure an AWS Cost Explorer report to monitor daily data transfer costs. Create an AWS Lambda function that executes hourly, calls the GetCostAndUsage API to retrieve the report data, analyzes the trends for anomalies, and calls the Systems Manager Automation API to run the runbook.

Answer

Create an AWS Cost Anomaly Monitor using the AWS services monitor type, create an Amazon EventBridge rule that filters for events originating from the AWS Cost Anomaly Detection service, and configure the rule to target the AWS Systems Manager Automation runbook.
The correct solution uses AWS Cost Anomaly Detection to monitor costs dynamically using machine learning baselines. When a cost anomaly is detected, the service automatically publishes an event to Amazon EventBridge (source: `aws.cost-anomaly-detection`). An EventBridge rule can match these events and directly invoke the AWS Systems Manager Automation runbook to remediate the network issue immediately with no custom polling code or intermediary components, satisfying the requirement for minimal operational overhead.

Step-by-Step Solution

1
Select the appropriate cost monitoring tool that uses machine learning for anomaly detection.
Identify AWS Cost Anomaly Detection as the correct tool because it uses machine learning to dynamically baseline and identify unexpected cost spikes.
AWS Budgets and CloudWatch EstimatedCharges use static thresholds rather than machine learning.
2
Determine the event source for automating remediation upon detection of a cost anomaly.
Identify that AWS Cost Anomaly Detection integrates with Amazon EventBridge, sending events with the source 'aws.cost-anomaly-detection'.
This integration allows EventBridge rules to match cost anomalies without polling APIs or writing custom detection logic.
3
Configure the target of the EventBridge rule to execute the required remediation action.
Set the AWS Systems Manager Automation runbook as the direct target of the EventBridge rule.
EventBridge can target Systems Manager Automation directly, minimizing operational overhead and removing the need for intermediary custom Lambda functions.

Key Concept

AWS Cost Anomaly Detection ML-driven alerting and EventBridge integration
Rate this question

Topics

AWS Cost Explorer and Cost Anomaly Detection

More questions from this topic