惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
Vulnerabilities – Threatpost
T
The Blog of Author Tim Ferriss
S
SegmentFault 最新的问题
D
DataBreaches.Net
博客园_首页
罗磊的独立博客
B
Blog
T
Threat Research - Cisco Blogs
C
Cisco Blogs
GbyAI
GbyAI
Engineering at Meta
Engineering at Meta
WordPress大学
WordPress大学
G
GRAHAM CLULEY
H
Help Net Security
酷 壳 – CoolShell
酷 壳 – CoolShell
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
爱范儿
爱范儿
SecWiki News
SecWiki News
T
Threatpost
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Schneier on Security
Schneier on Security
T
The Exploit Database - CXSecurity.com
Google Online Security Blog
Google Online Security Blog
T
Tor Project blog
小众软件
小众软件
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Y
Y Combinator Blog
H
Hacker News: Front Page
V
V2EX
Security Latest
Security Latest
Cloudbric
Cloudbric
Simon Willison's Weblog
Simon Willison's Weblog
Attack and Defense Labs
Attack and Defense Labs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
P
Proofpoint News Feed
博客园 - 三生石上(FineUI控件)
NISL@THU
NISL@THU
S
Secure Thoughts
Blog — PlanetScale
Blog — PlanetScale
博客园 - 司徒正美
V2EX - 技术
V2EX - 技术
Vercel News
Vercel News
P
Palo Alto Networks Blog
IT之家
IT之家
MyScale Blog
MyScale Blog
有赞技术团队
有赞技术团队
Application and Cybersecurity Blog
Application and Cybersecurity Blog
D
Docker
Google DeepMind News
Google DeepMind News
Webroot Blog
Webroot Blog

Datadog | The Monitor blog

Introducing our open source AI-native SAST Instrument and monitor Boomi integration flows with OpenTelemetry and Datadog Not all index scans are equal: How we cut query latency by over 99% Platform engineering metrics: What to measure and what to ignore Integrate Recorded Future threat intelligence with Datadog Cloud SIEM CI/CD security: threat modeling using a MITRE-style threat matrix CI/CD security: How to secure your GitHub ecosystem Ingress NGINX is EOL: A practical guide for migrating to Kubernetes Gateway API Operating agentic AI with Amazon Bedrock AgentCore and Datadog LLM Observability: Lessons from NTT DATA Introducing the Datadog Code Security MCP Capture and analyze custom heatmaps in Session Replay Understand session replays faster with AI summaries and smart chapters Monitor ClickHouse query performance with Datadog Database Monitoring How we designed empathetic alert sounds for on-call engineers Search and act across Datadog to resolve issues faster with Bits Assistant Measure the business impact of every product change with Datadog Experiments Analyzing round trip query latency Configuring JavaScript caches for better performance Introducing Bits AI Dev Agent for Code Security Datadog achieves ISO 42001 certification for responsible AI Monitor Nutanix clusters, hosts, and VMs with Datadog Monitor Juniper Mist in Datadog A new Host Map for modern infrastructure Annotate traces to improve LLM quality with Datadog LLM Observability What’s new in Cloud SIEM: AI-powered investigations, enhanced threat intelligence, and scalable security operations Explore Kubernetes with native OpenTelemetry data Monitor Oracle Fusion Cloud Applications with Datadog Announcing the Datadog Terraform provider v4.0.0 Scaling Kubernetes workloads on custom metrics How to design cloud environments for AI-powered threat analysis Monitor Aruba Central in Datadog How we centralize and remediate risks with Datadog Case Management Accelerate incident response with Datadog and ServiceNow Monitor your application and network load balancer logs Understanding Karpenter architecture for Kubernetes autoscaling Tools for collecting metrics and logs from Karpenter Monitor Karpenter with Datadog What your product data is actually saying Key metrics for monitoring Karpenter Securing Datadog’s platform in the AI age: The role of observability data Four ways engineering teams use the Datadog MCP Server to power AI agents Approaching your observability migration with the right mindset Meet the new Bits AI SRE: Deeper reasoning, twice as fast Key learnings from the 2026 State of DevSecOps study Use plain English to query your multi-cloud infrastructure in Resource Catalog Simplifying troubleshooting across the user journey with Datadog Synthetic Monitoring Protect your OCI resources with Datadog Cloud Security This Month in Datadog - February 2026 Amazon EC2 security: How misconfigured and public AMIs expand your cloud attack surface Enable end-to-end visibility into your Java apps with a single command Measure and improve mobile app startup performance with Datadog RUM Evaluating our AI Guard application to improve quality and control cost Identify untested code across every level of your codebase Make use of guardrail metrics and stop babysitting your releases Monitor Versa Networks SD-WAN performance in Datadog Improve performance and reliability with APM Recommendations Remediate transitive vulnerabilities faster with Datadog Software Composition Analysis Generate audit-ready vulnerability and compliance reports with Datadog Sheets Monitor Fortinet FortiManager performance in Datadog Improve test coverage across codebases with Datadog Code Coverage Move fast, don’t break things: Consistent testing standards at scale Enrich logs with ServiceNow CMDB context before routing to any SIEM or logging tool Monitor Lustre with Datadog Make faster, better product decisions with Datadog Product Analytics Surface and remediate runtime posture issues with Workload Protection Findings Protect agentic AI applications with Datadog AI Guard How to optimize JavaScript code with CSS Trace Google Pub/Sub workloads in Cloud Run with Datadog Detect human names in logs with ML in Sensitive Data Scanner How we cut our NLQ agent debugging time from hours to minutes with LLM Observability Debug PostgreSQL query latency faster with EXPLAIN ANALYZE in Datadog Database Monitoring Datadog acquires Propolis Unify and correlate frontend and backend data with retention filters Scale compliance across global frameworks with Datadog Cloud Security Monitor Arista VeloCloud SD-WAN performance with Datadog Building reliable dashboard agents with Datadog LLM Observability Simplify log collection and aggregation for MSSPs with Datadog Observability Pipelines Mitigation for Node.js denial-of-service vulnerability affecting Datadog APM Automate flaky test fixes with the Bits AI Dev Agent and Test Optimization How we built an AI SRE agent that investigates like a team of engineers Datadog integrations 2025 recap: Observability for AI, security, and hybrid cloud Design effective executive dashboards with Datadog Implement dbt data quality checks with dbt-expectations Bring faster visibility into AWS Lambda functions with remote instrumentation Troubleshoot faster with the GitLab Source Code integration in Datadog How Cambia Health Solutions saved $30,000 monthly with Cloud Cost Management and the Datadog Resource Catalog Normalize any logs for Cloud SIEM with Datadog's OCSF processor Optimizing Datadog at scale: Cost-efficient observability at Zendesk Detect, diagnose, and resolve network issues easily with CNM Network Health Connect engineering errors to user impact in early-stage products Cilium configuration for Kubernetes operations at scale Designing feedback loops for progressive delivery Ship features faster and safer with Datadog Feature Flags Choosing the right OpenTelemetry Collector distribution Route your monitor alerts with Datadog monitor notification rules Automate Cloud SIEM investigations with Bits AI Security Analyst Cloud threat detection: How to identify risky activity across control and data planes Collecting Kafka performance metrics Monitoring Kafka with Datadog Monitoring Kafka performance metrics
Key learnings from the State of Cloud Costs study
2024-09-09 · via Datadog | The Monitor blog

We recently released our initial State of Cloud Costs report, which identified factors shaping the costs of hundreds of organizations that use Datadog Cloud Cost Management to monitor their AWS spend. The report reveals several widely applicable themes, including the ways in which resource utilization, adoption of emerging technologies, and participation in commitment-based discount programs all shape cloud environments and costs.

In this post, we’ll explore those themes, describe best practices you can use to optimize your cloud environment, and show you how Datadog can help. You’ll learn how you can:

Don’t waste container spend on idle resources

To run healthy containers, you need to provision enough hosts in your cluster and dedicate sufficient CPU and memory to ensure the performance of your workloads. But to run containers cost-efficiently, you need to avoid over-provisioning—running clusters with more nodes than necessary or requesting more CPU and memory than your workloads require—which can leave your infrastructure underutilized. It’s difficult to predict the resource requirements for new and evolving workloads, and organizations often over-provision to be on the safe side. As a result, their infrastructure is underutilized, and these idle resources are a frequent contributor to wasted cloud spend.

To carefully manage your container costs, you need an understanding of your workloads’ current and future resource requirements, as well as ongoing visibility into their resource utilization. You can monitor metrics from your ECS, EKS, and self-managed Kubernetes environments to understand the performance and resource utilization of your workloads. These metrics can help you understand your applications’ baseline performance, which gives you useful information for revising resource requests and autoscaling parameters.

Find and fix underutilized container infrastructure with Datadog

Datadog Cloud Cost Management gives you tools to analyze the utilization and cost efficiency of your containerized environments, including EKS, ECS, and Kubernetes on EC2. The Containers view—shown in the screenshot below—makes it easy to see if any of your Kubernetes spend is being wasted on workload idle or cluster idle. You can filter your cost data by any dimensions that are meaningful to your organization—such as cluster, service, or team—to see where your idle costs are coming from. To address any wasted spend due to over-provisioning, you can autoscale your clusters and individual workloads.

Kubernetes Costs Overview with total spend and detailed breakdown by usage, workload idle, and cluster idle costs.

Cloud Cost Management also provides detailed guidance on how you can revise your resource requests to mitigate wasted spend. By monitoring your clusters’ performance data, Datadog can automatically identify over-provisioned workloads and recommend request values that can reduce your cloud costs while still allocating enough CPU and memory to ensure the performance of your applications. And Datadog Kubernetes Autoscaling enables you to continuously optimize your cluster to ensure efficient resource usage.

Recommendations for an over-provisioned Kubernetes container with potential monthly savings details.

Migrate to current-generation AWS services

As AWS evolves and improves its services, their most recent versions are often the most performant and cost-efficient. For example, many current-generation EC2 instances use modern Intel Xeon or AWS Graviton processors, which give these EC2s improved cost-efficiency compared to previous generations. Similarly, the most recent EBS volume type—gp3—boasts cost and performance improvements over the previous generation, gp2.

It’s often an easy choice to adopt current-generation services to support brand new workloads, but migrating existing workloads may not be as simple. Moving to a new storage service or compute architecture often comes with a need for planning and testing to ensure that the change won’t introduce any user-facing impact or breach any SLAs. The risk and burden of migrating may explain why previous-generation versions of AWS services—for example, EBS and EC2—are still widely used.

Identify previous-generation services and plan your migration

A significant part of the challenge of modernizing your infrastructure is identifying all of the workloads in your environment that rely on previous-generation services. It’s also important to see the extent to which these services affect your cloud costs, so you can prioritize migrating the workloads that will bring the greatest optimizations.

You can leverage Cloud Cost Management to see the savings you could realize by migrating away from the legacy technologies in your environment, such as gp2 volumes. In the screenshot below, Cloud Cost Recommendations lists gp2 volumes in use and displays an AWS CLI command you can use to migrate a volume to use the gp3 volume type instead.

Recommendations for migrating EBS volume type from gp2 to gp3 with potential monthly savings details.

Another important piece of migrating is understanding the context of each occurrence of legacy technology in your environment. Before you can plan and prioritize a migration, you should identify your services that rely on those legacy technologies, the teams that own those services, and any risks you face when you migrate. The Resource Catalog shows the infrastructure resources in your environment with valuable context, including ownership and service information from the Service Catalog. You can easily group resource data by using attributes such as instance type or volume type to aggregate records in a way that shows you your usage of old- and new-generation AWS services. In the screenshot below, the Resource Catalog lists gp2 volumes and shows the team and service each one is associated with.

Resource Catalog displaying EBS volumes with details on account, name, region, volume type, state, size, and service.

Reduce your cross-AZ data transfer costs

Transferring data to, from, and within your AWS environment can contribute to your cloud bill. For example, you’ll incur costs sending data between your EC2 instances and the internet, and from one availability zone (AZ) to another within the same region in your AWS environment. This cross-AZ traffic makes up half of data transfer costs for the organizations we looked at, and almost all those organizations paid some amount for cross-AZ traffic.

To manage your cross-AZ spending, you need to understand which of your services are talking to endpoints in other AZs and decide whether that traffic is necessary. Similar to migrating to current-generation data stores and compute instances, reconfiguring your services to keep traffic within a single AZ may or may not be worth the effort it requires. If limiting the associated services to a single AZ would affect their performance or availability, or if the work to re-architect them wouldn’t be offset by the cost efficiency gained, you may need to acknowledge the costs as necessary and budget accordingly going forward.

Gain visibility into your cross-AZ traffic

Datadog Network Performance Monitoring (NPM) lets you visualize traffic between AZs. You can use the traffic’s service tag to isolate network activity to and from a specific service, helping you understand how the volume of that service’s traffic contributes to your cross-AZ spend. In the screenshot below, the Network Analytics view shows the relative amounts of traffic between different AZs.

Network Performance analytics displaying volume sent summary graphs by availability zones.

The Network Analytics view illustrates where cross-AZ traffic occurs, providing context to better understand your costs. But to illuminate those costs further, you can pivot to Cloud Cost Management, which brings together cost and observability data to help you understand and optimize your cloud spend. In the screenshot below, the Cloud Cost Analytics page shows cross-AZ costs for the past 30 days. The data is grouped by service to show the costs incurred by each service as well as the percentage of change in cost over the selected time range. This stacked bar chart illustrates the relative cost incurred by each service as well as the organization’s overall daily spending on this type of traffic, and the table below summarizes costs based on the source and destination AZs.

Cloud Cost Analytics page displaying net amortized cost by AWS availability zone and service.

To prioritize your optimization work, you can easily sort the data by cost to highlight the services that incur the most cross-AZ cost. And to jump-start your collaboration on these efforts, you can pivot to the Service Catalog, where you’ll find each service’s ownership information, along with its reliability, performance, and security data.

Use commitment-based discounts

AWS offers several discount programs that reduce the cost of some of its services if you commit to an amount of spend or usage over a defined period. For example, Compute Savings Plans cut prices on AWS compute services—including EC2, Fargate, and Lambda—when you pay in advance to use those services. Savings Plans don’t restrict which services or instance types you use during the committed term, so you can change how you use AWS compute and still benefit from discounts on any of them.

Despite the potential savings promised by commitment-based discount programs, we saw a decline in the percentage of organizations participating. Purchasing discounts carries risk, and organizations are often circumspect in adopting them because overcommitting can result in unused capacity and wasted cloud spend. To minimize risk, you should analyze your AWS bill to identify trends in your usage of services that offer a commitment-based discount. If you can confidently project your future usage across a discount term—for example, the amount you expect to spend across EC2, Fargate, and Lambda over the next one- or three-year period—you should consider purchasing the discount.

Use Datadog to identify discountable costs

Cloud Cost Management automatically tags your cloud costs to show whether they’re covered under a discount program. You can explore your data to see the proportion of costs that are covered by commitment-based discounts compared to your on-demand costs and visualize changes in these cost types to uncover trends in discount coverage. Datadog stores 15 months of cloud cost data, giving you deep visibility into your daily on-demand spend history to guide you in purchasing discounts. You can even isolate each resource’s costs, as well as context data such as its RDS instance type and database engine.

The screenshot below shows the past year of daily on-demand spend data, grouped by region, instance type, and database engine.

AWS RDS Reservations Overview with daily on-demand spend trends and breakdown by region, instance type, and engine.
AWS RDS Reservations Overview with daily on-demand spend trends and breakdown by region, instance type, and engine.

You can filter further to see how much cost is discounted for specific AWS accounts and regions to gain context on where your organization is leveraging AWS discounts and where you might be able to optimize.

Understand and manage your AWS spend with Datadog

Our inaugural State of Cloud Costs report surfaced some important themes that illuminate the paths to cost optimization. In this post, we looked at how Datadog can help you take initial steps to optimize your cloud costs, and how you can rely on Datadog to continue to drive efficiency as your cloud environments expand and mature. Datadog combines usage and performance metrics with your cost data to give you deep visibility into your cloud spend so that you can identify and act on cloud cost optimization opportunities.

See our documentation for information about getting started with Cloud Cost Management. And if you’re not already using Datadog, you can start today with a 14-day free trial.