AWS Cost Anomaly Detection Stack
CloudFormation: Cost Anomaly Monitor with SNS topic and Lambda that formats anomaly alerts into readable email digests instead of raw JSON.
AWS Cost Anomaly Detection Stack
CloudFormation stack that deploys AWS Cost Anomaly Detection with a Lambda function that converts the default raw JSON alerts into readable email digests. Know when your costs spike without decoding machine-formatted payloads.
What Is Included
- Cost Anomaly Monitor — AWS-native anomaly detection watching your total account cost
- SNS Topic — Receives anomaly events from AWS Cost Explorer
- Lambda Formatter — Parses the raw anomaly JSON and sends a clean email digest with service breakdown
- IAM Roles — Least-privilege execution role for the Lambda function, defined in the template
How It Works
- Deploy the CloudFormation stack and pass your alert email address as a parameter
- Confirm the SNS subscription email that arrives after deployment
- When AWS detects a cost anomaly, Lambda formats the payload and delivers a clean digest
- Alert includes: impacted service, expected vs actual spend, percentage over baseline, and date range
What You Get
cloudformation.yaml— full stack: Anomaly Monitor, SNS topic, Lambda function, and IAM roleslambda/index.js— the formatter function source (editable if you want custom output format)README.md— deployment steps, alert threshold configuration, and customization notes
Requirements
AWS account with CloudFormation, Lambda, SNS, and Cost Explorer access. Cost Anomaly Detection is included in the AWS Free Tier. Lambda and SNS charges are negligible at alert volume.