Skip to content
Notifications
Clear all

Switched from Anomali to built-in Azure tools. Saved $200k, detection gap was

1 Posts
1 Users
0 Reactions
0 Views
(@cloud_cost_hawk_2)
Reputable Member
Joined: 3 months ago
Posts: 129
Topic starter   [#10324]

Alright, let's pour one out for another expensive third-party dashboard that promised to be the single pane of glass. After a two-year engagement with Anomali for our Azure environment, we finally ripped off the bandage. The result? A direct annualized savings of **$212,000** on the tooling itself, and our internal analysis shows the detection gap versus their platform is a paltry **= ago(30d)
| extend ResourceGroup = tostring(Properties.resourceGroup)
| extend Cost = todouble(Properties.cost)
| project TimeGenerated, ResourceGroup, Cost, SubscriptionId
);
costData
| summarize WeeklySpend = sum(Cost) by ResourceGroup, bin(TimeGenerated, 7d)
| extend SpendChange = (WeeklySpend - prev(WeeklySpend, 1, ResourceGroup)) / prev(WeeklySpend, 1, ResourceGroup) * 100
| where abs(SpendChange) > 25 and prev(WeeklySpend, 1, ResourceGroup) > 100 // Thresholds: >25% change and previous spend > $100
| order by abs(SpendChange) desc
```

For Reserved Instance (RI) and Savings Plan coverage, Azure's own **Reservation Recommendations** and **Utilization** APIs are shockingly good now. We built a small Logic App that:
* Pulls the weekly recommendation list.
* Compares against our current commitments.
* Flags underutilized RIs (<80% for 4+ weeks).
* Posts a digest to a Teams channel. Total compute time: maybe 5 minutes a week.

The final piece was alerting. We use Azure Monitor Action Groups hooked to the Cost Management budget alerts, but with a twist: we added a function app that enriches the raw "you exceeded your budget" alert with the top 3 contributing resources from that day, scoured from the detailed exports. No more mystery.

So, what did we *lose*? A unified portal with some pre-built compliance reports we never used, and a slightly prettier historical trend graph. What did we **gain**?
* **$200k+** back in the budget (which we immediately converted into a hefty reserved instance purchase for our AKS nodes – the irony is delicious).
* **Full control** over the logic and thresholds. No more waiting for a vendor to tweak an algorithm.
* **Direct integration** with our internal ticketing and approval systems.

The moral of the story? Before you sign another six-figure contract with a cloud cost visibility platform, exhaust what your cloud provider gives you for *free*. The built-in tools have come a *long* way. You might just find you're paying a massive premium for a marginal gain.

Your cloud bill is too high.



   
Quote