Skip to main content
Patterned Designs Patterned Designs Documentation
    • Overview
    • Installation
    • First Module
    • Authentication
    • Overview
    • VPC with EC2
    • Serverless API
    • Overview
    • Module Structure
    • Versioning
    • Overview
    • Naming Conventions
    • Tagging
    • Overview
    • Common Issues
  • Modules
    • cloudwatch-logs/aws
      • Inputs
        • kms_key_arn
        • log_group_name
        • metric_filters
        • retention_in_days
      • Outputs
        • log_group_arn
        • log_group_name
      • Examples
        • Basic Usage
        • Custom Retention
        • KMS Encrypted Logs
        • Metric Filters
        • Lambda Integration
      • Demonstrations
        • CloudWatch Logs Insights Queries
        • Cross-Account Log Streaming
      • Use Cases
        • Application Logging
        • Security Audit Logging
        • Container Logging
    • s3-bucket/aws
      • Inputs
        • access_logging
        • bucket_name
        • cors_configuration
        • encryption_type
        • kms_key_arn
        • lifecycle_rules
        • versioning_enabled
      • Outputs
        • bucket_arn
        • bucket_domain_name
        • bucket_id
        • bucket_regional_domain_name
      • Examples
        • Basic Usage
        • With Versioning
        • KMS Encrypted
        • Static Website
        • With Lifecycle Rules
        • Cross-Region Replication
        • CloudFront Origin
      • Demonstrations
        • Static Website Hosting
        • Lambda Event Processing
      • Use Cases
        • Static Website Hosting
        • Data Lake Storage
        • Backup Storage
        • Artifact Repository
    • access-policy/aws
      • Inputs
        • allowed_services
        • denied_actions
        • policy_name
        • policy_type
        • resource_restrictions
      • Outputs
        • policy_arn
        • policy_document
        • policy_id
      • Examples
        • Basic Usage
        • S3 Read-Only Access
        • EC2 Administrator
        • Cross-Account Access
        • Least Privilege Pattern
      • Demonstrations
        • IAM Policy Simulator
        • Permission Boundary Setup
      • Use Cases
        • Least Privilege Access
        • Service Boundaries
        • Compliance Controls
    • cost-controls/aws
      • Inputs
        • alert_thresholds
        • budget_limit
        • budget_name
        • notification_emails
        • sns_topic_arn
      • Outputs
        • budget_arn
        • budget_name
        • sns_topic_arn
      • Examples
        • Basic Usage
        • Monthly Budget with Multi-Threshold Alerts
        • Service-Specific Budget
        • Budget with SNS Integration
        • Multi-Environment Budgets
      • Demonstrations
        • Setting Up Budget Alerts
        • Slack Integration for Budget Alerts
      • Use Cases
        • Department Budgets
        • Project Cost Tracking
        • Cost Anomaly Detection
    • alb/aws
      • Inputs
        • internal
        • name
        • subnets
        • vpc_id
      • Outputs
        • alb_arn
        • alb_dns_name
        • alb_zone_id
      • Examples
        • Basic Usage
        • HTTPS Redirect
        • Multiple Target Groups
        • Path-Based Routing
        • Host-Based Routing
        • With WAF Integration
      • Demonstrations
        • HTTPS Load Balancer Setup
        • SSL Termination Setup
      • Use Cases
        • Web Applications
        • API Gateway
        • Static Content
        • Microservices Router
      • Changelog
    • ec2-instance/aws
      • Inputs
        • ami_id
        • instance_name
        • instance_type
        • subnet_id
      • Outputs
        • instance_id
        • private_ip
        • public_ip
      • Examples
        • Basic Usage
        • With EBS Volumes
        • With User Data
        • Spot Instance
        • Auto Recovery
        • Multi-Environment
      • Demonstrations
        • Web Server Setup
        • LAMP Stack Setup
      • Use Cases
        • Application Servers
        • Web Servers
        • Bastion Hosts
        • Development Environments
      • Changelog
    • ecs-service/aws
      • Inputs
        • cluster_arn
        • desired_count
        • service_name
        • task_definition_arn
      • Outputs
        • service_arn
        • service_name
      • Examples
        • Basic Usage
        • With ALB
        • Auto-Scaling
        • Service Discovery
        • Blue/Green Deployment
        • Multi-Container Task
      • Demonstrations
        • Fargate Service Deployment
        • Rolling Deployment
      • Use Cases
        • Containerized Applications
        • Microservices Architecture
        • API Backend Services
        • Background Processing
      • Changelog
    • iam-role/aws
      • Inputs
        • assume_role_policy
        • inline_policies
        • managed_policy_arns
        • max_session_duration
        • name
        • permissions_boundary
      • Outputs
        • role_arn
        • role_id
        • role_name
        • unique_id
      • Examples
        • Basic Lambda Execution Role
        • Lambda with VPC Access
        • Lambda with Custom Permissions
        • Cross-Account Access Role
        • EC2 Instance Role
        • ECS Task Role
        • Role with Permissions Boundary
        • Multiple Roles for Different Environments
      • Demonstrations
        • Lambda Execution Role
        • Cross-Account Role
      • Use Cases
        • Service Roles
        • Cross-Account Access
        • Federated Access
      • Changelog
    • kms-key/aws
      • Inputs
        • alias
        • deletion_window_in_days
        • description
        • enable_key_rotation
      • Outputs
        • alias_arn
        • key_arn
        • key_id
      • Examples
        • Basic Usage
        • S3 Bucket Encryption
        • RDS Encryption
        • EBS Volume Encryption
        • Secrets Manager
        • Multi-Region Key
      • Demonstrations
        • S3 Bucket Encryption
        • Envelope Encryption Pattern
      • Use Cases
        • Data Encryption
        • Compliance Requirements
        • Secrets Management
        • Backup Encryption
      • Changelog
    • lambda-function/aws
      • Inputs
        • environment_variables
        • function_name
        • handler
        • memory_size
        • reserved_concurrent_executions
        • runtime
        • source_path
        • timeout
        • vpc_config
      • Outputs
        • function_arn
        • function_name
        • invoke_arn
        • qualified_arn
        • role_arn
      • Examples
        • Basic Usage
        • API Handler
        • VPC-Connected Function
        • Event Processor
        • Scheduled Function
        • Multiple Environments
      • Demonstrations
        • API Gateway Integration
        • S3 Event Processing
      • Use Cases
        • REST API Backend
        • Scheduled Tasks
        • Event-Driven Processing
        • Microservices
      • Changelog
    • secrets-manager/aws
      • Inputs
        • kms_key_id
        • name
        • recovery_window_in_days
        • secret_string
      • Outputs
        • secret_arn
        • secret_id
        • secret_version_id
      • Examples
        • Basic Usage
        • Database Credentials
        • API Keys Storage
        • Automatic Rotation
        • JSON Structured Secrets
        • Cross-Account Access
      • Demonstrations
        • Database Credentials Management
        • Lambda Integration
      • Use Cases
        • Credential Management
        • Application Secrets
        • Database Access
        • Third-Party Integration
      • Changelog
    • security-group/aws
      • Inputs
        • egress_rules
        • ingress_rules
        • name
        • vpc_id
      • Outputs
        • security_group_arn
        • security_group_id
      • Examples
        • Basic Usage
        • Web Server
        • Database Access
        • SSH Access
        • All Outbound
        • Multiple Ingress Sources
      • Demonstrations
        • Three-Tier Architecture Security
        • Complete VPC Security Setup
      • Use Cases
        • Network Segmentation
        • Application Isolation
        • Defense in Depth
        • Microservices Mesh
      • Changelog
    • vpc/aws
      • Inputs
        • availability_zones
        • enable_dns_hostnames
        • enable_ipv6
        • enable_nat_gateway
        • single_nat_gateway
        • tags
        • vpc_cidr
      • Outputs
        • ipv6_cidr_block
        • nat_gateway_ids
        • private_subnet_ids
        • public_subnet_ids
        • vpc_cidr_block
        • vpc_id
      • Examples
        • Basic Usage
        • Development Environment
        • Production Environment
        • IPv6-Enabled VPC
        • Isolated VPC
        • Multi-Account Hub VPC
        • Complete Application Stack
        • Multiple Environments
      • Demonstrations
        • Multi-AZ VPC Setup
        • VPC Peering Configuration
      • Use Cases
        • Production Environment
        • Multi-Tier Architecture
        • Hybrid Cloud
      • Changelog
    • naming-convention/aws
      • Inputs
        • environment
        • project
        • region_code
        • separator
        • tags
      • Outputs
        • id
        • prefix
        • tags
      • Examples
        • Basic Usage
        • Multiple Environments
        • Multi-Region Setup
        • Custom Delimiter
        • Custom Tags
      • Demonstrations
        • Implementing Naming Standards
        • Cross-Environment Deployment
      • Use Cases
        • Multi-Account Organization
        • Resource Organization
        • Compliance Tagging
    • tagging-policy/aws
      • Inputs
        • additional_tags
        • default_tags
        • enforce_lowercase
        • required_tags
        • tag_values
      • Outputs
        • merged_tags
        • required_tag_keys
        • validation_rules
      • Examples
        • Basic Usage
        • Required Tags
        • Cost Allocation
        • Environment Tags
        • Multi-Account Setup
      • Demonstrations
        • Tag Enforcement Setup
        • Cost Explorer Integration
      • Use Cases
        • Cost Tracking
        • Resource Ownership
        • Compliance Enforcement
View Registry
  1. governance
  2. cost-controls
  3. Use Cases

Use Cases

Discover how the cost-controls module can solve real-world infrastructure challenges. Each use case describes a common scenario, its benefits, and architectural considerations.

Department Budgets

Allocate and track cloud spending across different departments or teams

  • Chargeback and showback capabilities
  • Team accountability for cloud costs
  • Prevent budget overruns

Project Cost Tracking

Track and control costs for individual projects or initiatives

  • Project-level cost visibility
  • Budget adherence monitoring
  • Early warning for overruns

Cost Anomaly Detection

Detect unexpected cost spikes and unusual spending patterns

  • Early detection of cost issues
  • Protection against billing surprises
  • Automated alerting on anomalies
On this page
  • Introduction
  • Use Cases
Related
  • cost-controls Overview
  • Examples
  • Inputs
ESC
↑↓ navigate Enter select ESC close