Configure AWS billing alerts or caps for all accounts

adborden commented 3 years ago

User Story

In order to meet requirements of the anti-deficiancy act, data.gov wants to be alerted when estimated usage of our AWS accounts exceeds our expected amounts.

Acceptance Criteria

[ACs should be clearly demoable/verifiable whenever possible. Try specifying them using BDD.]

[ ] GIVEN [a contextual precondition] \ [AND optionally another precondition] \ WHEN [a triggering event] happens \ THEN [a verifiable outcome] \ [AND optionally another verifiable outcome]

Background

[Any helpful contextual notes or links to artifacts/evidence, if needed]

Security Considerations (required)

[Any security concerns that might be implicated in the change. "None" is OK, just be explicit here!]

Sketch

[Notes or a checklist reflecting our understanding of the selected approach]

mogul commented 3 years ago

@adborden is going to see if the TTS Tech Portfolio is already doing this or not

adborden commented 3 years ago

From the Tech Portfolio:

since Solutions all pulls from one budget line, we only have an alert at that level right now, which goes to the Tech Portfolio (for lack of a better email). not ideal, obviously. if curious, here's where to find that:

https://github.com/18F/aws-admin#budgets

https://github.com/18F/aws-admin/blob/e7e79f68cc4face081e6ace994feb04539796467/terraform/organization.tf#L34-L42

This implements alerts at the Solutions level for thresholds of 95% forecast. That's not great, but it's something. They are also open to pairing in order to implement something at the team level.

I'm not familiar with AWS Budgets, so I don't know if this is something we could also implement on our own, or if it would be required to be done at the Payer account level (Tech Portfolio).

GSA / data.gov