aws:cloudwatch
CloudWatch Logs / metrics
- Host type
- AWS
- Tier, as a whole
- Recommended
- Cost class
- Usage billed
- Techniques
- 9
- Rules listed
- 0
- Events
- 0
Licensing
- License or service
- CloudWatch Logs
- What is free
- 5 GB/mo ingestion+archive+Insights scan free
- What costs
- Standard ingest per GB (~$0.50 first tier); archive ~$0.03/GB; Insights per GB scanned
- Notes
- Vended logs (VPC/R53/EKS) use tiered vended rates
- As read on
- 2026-11-01
A vendor statement as read on the date shown; the cost class is the durable part.
Techniques
- T1496 Resource Hijacking
- T1496.001 Compute Hijacking
- T1498.001 Direct Network Flood
- T1498.002 Reflection Amplification
- T1499 Endpoint Denial of Service
- T1499.002 Service Exhaustion Flood
- T1499.003 Application Exhaustion Flood
- T1499.004 Application or System Exploitation
- T1578 Modify Cloud Compute Infrastructure
Rules
No vendor rule names this event or source directly.
Events
No event-level rows: this source is tiered as a whole.