Back to guides

Guide · Cost Control

AWS Bill Suddenly High? What to Check First

An unexpected AWS bill can ruin your month. Here's a practical checklist to find the cause—and how to prevent it from happening again.

Use this checklist alongside Cost Optimization and Observability spend attribution checks. Primary control: Cost Optimization

Triage in Cost Explorer first

Open Cost Explorer. Filter by day and service for the spike window. Rank EC2, Lambda, RDS, S3, and data transfer—outbound internet egress hides in plain sight. APRF Cost Optimization expects you to find the driver before the next invoice, not after.

Typical culprits:

- Forgotten dev RDS/EC2 left 24/7

- Lambda or EventBridge loops (S3 → Lambda → S3)

- Compromised keys with unusual API volume

- Partner or scraper traffic on uncapped endpoints

One team paid for idle RDS for months after a project ended. Another weekend Lambda loop produced a five-figure surprise.

Then stop the bleed

Shut or resize orphaned resources. Break recursive event rules. If usage looks hostile, rotate keys and review IAM access history. Add edge or API throttles if public traffic is the amplifier.

So it cannot sneak up again

AWS Budgets at 50% / 80% / 100% of expected spend, Cost Anomaly Detection, and consistent tags for allocation. Alerts are Cost Optimization evidence—pair them with hard limits on the paths that can run away (AI tokens, Lambda concurrency, public APIs).

Next: Cost Optimization

Open the related pillar specification for mandatory checks, artifacts, and pass conditions. Self-attest is optional.

View Cost OptimizationSelf-attest

Related

Frequently asked questions

Why did my AWS bill suddenly increase?
Common causes include forgotten resources (EC2, RDS), runaway Lambda or event-driven workloads, increased data transfer, or a compromised API key. Use Cost Explorer to break down costs by service and time period.
How do I set up AWS billing alerts?
Use AWS Budgets. Create a budget with your expected monthly spend, then configure alerts at 50%, 80%, and 100% of that amount. You'll receive email notifications when thresholds are crossed.
What AWS services cost the most?
EC2, RDS, Lambda, S3, and data transfer (especially outbound to the internet) are typically the largest cost drivers. Cost Explorer shows exact breakdowns by service.