AWS solutions documentation change
Summary
Expanded cost examples with multi-region deployments and added KMS key rotation cost details
Security assessment
Adds documentation about KMS key rotation costs which is a security best practice, but doesn't indicate a security issue. The change provides operational details about security feature (encryption key management) costs.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/cost.md b/solutions/latest/automated-security-response-on-aws/cost.md index 02aba1955..63bf86df2 100644 --- a//solutions/latest/automated-security-response-on-aws/cost.md +++ b//solutions/latest/automated-security-response-on-aws/cost.md @@ -9 +9,16 @@ Sample cost tablePricing examples (monthly)Additional cost for optional features -You are responsible for the cost of the AWS services used to run this solution. As of this revision, the cost for running this solution with the default settings in the US East (N. Virginia) AWS Region is approximately **$21.17 for 300 remediations/month** , **$134.86 for 3,000 remediations/month** , and **$1,281.01 for 30,000 remediations/month**. Prices are subject to change. For full details, refer to the pricing page for each AWS service used in this solution. +You are responsible for the cost of the AWS services used to run this solution. + +As of this revision, the estimated monthly costs are: + + * Small deployment (10 accounts, 1 region - US East/N. Virginia): Approximately $21.17 for 300 remediations/month + + * Medium deployment (100 accounts, 1 region - US East/N. Virginia): Approximately $134.86 for 3,000 remediations/month + + * Large deployment (1,000 accounts, 10 regions): Approximately $10,271.70 for 30,000 remediations/month + + + + +###### Important + +Prices are subject to change. For full details, refer to the pricing page for each AWS service used in this solution. @@ -52,0 +68 @@ Service | Free Tier | Pricing [USD] +[AWS Key Management Service pricing](https://aws.amazon.com/kms/pricing/) | 20,000 requests/month | $1.00 per 1 KMS key. For KMS keys that you rotate automatically or on demand, the first and second rotation of the key adds $1/month (prorated hourly) in cost. @@ -116 +132 @@ Amazon CloudWatch - Alarms | $0.10 * 3 alarms = $0.30 | $0.30 - * 1,000 accounts, 1 Region + * 1,000 accounts, 10 Regions @@ -120 +136 @@ Amazon CloudWatch - Alarms | $0.10 * 3 alarms = $0.30 | $0.30 - * Total cost $1,281.01 per month + * Total cost $1,271.70 per month @@ -134 +150 @@ Amazon EventBridge rules | No charge for rules | $0 -AWS Key Management Service | 1 key * 1,000 accounts * 1 Region * $1 = $1,000 | $1,000 +AWS Key Management Service | (1 key) $1 * 1,000 accounts * 10 Region = $10,000 | $10,000 @@ -141,2 +157,5 @@ Amazon CloudWatch - Alarms | $0.10 * 2 alarms = $0.20 | $0.20 -Amazon CloudWatch - Application Insights | $0.10 * 40 alarms (max) = $4.00 $0.53 * 10 GB log data (est.) = $5.30 $0.00267 * 5 OpsItems (est.) = ~$0.01 | $9.31 -**Total** | | **$1,281.01** +**Total** | | **$10,271.70** + +###### Important + +**KMS Key Rotation Costs** AWS Key Management Service (KMS) automatically rotates customer managed keys once per year when rotation is enabled. Each rotation incurs a cost of $1.00 per key per year. For example, with 1000 accounts in a single region, this results in an additional $1000/year (1 rotation × 1000 keys × $1.00).