Live data from Hacker News

AWS Control Tower

aws.amazon.com

31–40 of 51 posts

Re: AWS Control Tower

#31
Thank you AWS. In the meantime, if you could offer me just one basic setting that users have been asking for years (hard limit on your spending), it would be even better.

Re: AWS Control Tower

#32
post #13

Earlier quoted context omitted.

You should have the option to pay for the aggregate and get support across all the accounts, it only makes sense, really.

If I recall correctly, that only happens at the Enterprise support tier.

You pay a minimum of $100 per account for business support - 10% of your bill.

Re: AWS Control Tower

#33

I'd love it if at a glance I could see all of the AWS resources that I am using that cost me money, across all the regions. Right now I feel like I would have to poke into every menu option in every region across the entire set of AWS services to find out exactly what I'm using. The cynic in me wonders if this is not a priority for AWS because they make so much money from forgotten and hard to find resources that are…

Have you looked at AWS Config? Config gives you the ability to build asset inventories and be alerted when things change.

It only works regionally, but it's better than nothing.

Re: AWS Control Tower

#34
post #7

AWS is pushing Organizations/Accounts as something like GCP's Projects and it mostly works, cross account iam works pretty good, so does many other services but sadly this is not reflected in the support subscriptions. You want help with a problem in your staging account? pay for support, fair enough. You want help with your production? oh sorry, you have to pay again.

This is like most other AWS products that end up being an automated bunch of scripts that wire up functionality for you rather than being a full-fledged product. GCP organizations, folders, projects, and IAM system is far better than anything in AWS or Azure.

I find this aspect of aws annoying - it can be hard to cleanup after these products - they litter service accounts and templates everywhere. I tried gcp very early on and struggled to get IAM granularity but perhaps it has improved

Re: AWS Control Tower

#35

Thank you AWS. In the meantime, if you could offer me just one basic setting that users have been asking for years (hard limit on your spending), it would be even better.

(Assuming no malicious intent from AWS) One of the reasons this is probably hard is probably because a lot of services didn't start out with having resource constraints.

So now if you support something like a "hard-billing-cap", every single service in AWS has to support it. That's a huge stone to move - it could even be in the works today.

Re: AWS Control Tower

#36

Earlier quoted context omitted.

If I recall correctly, that only happens at the Enterprise support tier.

You pay a minimum of $100 per account for business support - 10% of your bill.

Business support has pricing that drops as a percentage as your spend goes up, like Enterprise, but does not allow you aggregate across accounts like enterprise.

It's only 10% for the first $10K. 7% for the portion up to $80K, 5% for the portion up to $250K, and 3% beyond that. (Enterprise has the same kind of %age ranges but cutoffs of $150K/$500K/$1M and the bottom range doesn't really matter because the hard minimum is $15K/mo.)

Re: AWS Control Tower

#37

Thank you AWS. In the meantime, if you could offer me just one basic setting that users have been asking for years (hard limit on your spending), it would be even better.

How would hard limits work? Do all your ec2 instances shut down? Do your s3 buckets and their data get deleted? Do you snapshots and EBS volumes get deleted? There's no way to pause these things since they still costs AWS money.

Re: AWS Control Tower

#38
post #35

Thank you AWS. In the meantime, if you could offer me just one basic setting that users have been asking for years (hard limit on your spending), it would be even better.

(Assuming no malicious intent from AWS) One of the reasons this is probably hard is probably because a lot of services didn't start out with having resource constraints. So now if you support something like a "hard-billing-cap", every single service in AWS has to support it. That's a huge stone to move - it could even be in the works today.

There's also no good way for most services to support it since storing data costs money and presumably you don't want AWS to wipe your data when you hit your spending cap.

Re: AWS Control Tower

#39
post #7

AWS is pushing Organizations/Accounts as something like GCP's Projects and it mostly works, cross account iam works pretty good, so does many other services but sadly this is not reflected in the support subscriptions. You want help with a problem in your staging account? pay for support, fair enough. You want help with your production? oh sorry, you have to pay again.

> You want help with a problem in your staging account? pay for support, fair enough. You want help with your production? oh sorry, you have to pay again.

That's not how it works for us. We have numerous accounts, all under the same support plan. We just let our rep know we have these accounts, and they add our existing support plan to it. After all, we are one client.

Edit: Occurred to me I should point out that we have Enterprise support.

Re: AWS Control Tower

#40

Thank you AWS. In the meantime, if you could offer me just one basic setting that users have been asking for years (hard limit on your spending), it would be even better.

How would hard limits work? Do all your ec2 instances shut down? Do your s3 buckets and their data get deleted? Do you snapshots and EBS volumes get deleted? There's no way to pause these things since they still costs AWS money.

You don’t let people start up the service if it will exceed a cost quota. For ec2 that should be easy since the cost ticks at a constant rate and can be extrapolated in advance, but yeah other usage based services like s3 and network traffic that won’t work.
Post reply on HN