You might be paying for unused WAF ACLs that you can't see. Here's what I found in my latest bill. 👇 - ThreadSky

About ThreadSky

theburningmonk.com • 138 days ago

You might be paying for unused WAF ACLs that you can't see.

Here's what I found in my latest bill. 👇

Comments

Another thing to note if you have scale is that Shield Advanced ($3000/month) covers all WebACL costs up to 1500 WCU across your entire AWS Organization. For larger enterprises this can be a significant cost saving, but do pay attention to the different DTO charges when doing the maths!

theburningmonk.com•138 days ago

AWS WAF Classic (or v1) was recently deprecated, and classic Web ACLs no longer appear in the new WAF console.

So it's easy to miss any classic web ACLs you have that are no longer in use, especially if you don't spend much time in the AWS console because you do everything through IaC!

theburningmonk.com•138 days ago

I saw some WAF charges on my bill and it took me a while to work out where they came from because I couldn't see any web ACLs in the WAF console!

To see if you have any classic web ACLs, go to the WAF Classic console:

https://buff.ly/4gElXQa

and either delete or migrate them before Sep 30, 2025.

theburningmonk.com•138 days ago

And if you need to migrate them to AWS WAF v2, then here's a handy migration guide:
https://buff.ly/4gKjuDZ

Ok, hope this helps you save a few $$!

danbkelleher.bsky.social•137 days ago

Saved me a few $ - thanks!

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply