News: 1622198769

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

AWS Free Tier, where's your spending limit? 'I thought I deleted everything but I have been charged $200'

(2021/05/28)


Analysis Amazon Web Services has come under fire for lack of hard spending limits on accounts, after some users reported unexpected bills from what they thought were tutorial accounts.

AWS does not have a freemium business model (unlike, say, GitHub or Dropbox), but it does have "free tier" services that cost nothing to use, within their constraints (which may be severe).

The company provides these not out of generosity but to enable experimentation, presumably in the hope that this leads in due course to paying customers. There can be bill shocks though, as the company provides no built-in feature that caps spending to zero or even to a specified amount.

[1]

[2]

[3]

The issue came up earlier this month when cloud architect Forrest Brazeal [4]reported on Twitter about a student who attended a Sagemaker (the AWS machine learning toolkit) tutorial and was sent a $200 bill, saying "I thought I deleted everything but I have been charged $200."

'If you blindly rush in to use an AWS service with the expectation that you won’t be charged, you’re likely to lose a hand'

It is not a new issue though. AWS billing consultant Corey Quinn [5]asked last year "Is the AWS Free Tier really free", and said, "it absolutely is not … the AWS Free Tier is free in the same way that a table saw is childproof. If you blindly rush in to use an AWS service with the expectation that you won’t be charged, you’re likely to lose a hand in the process."

As we understand it, AWS ran a workshop for several hundred attendees and provided instructions on shutting down instances, but in some cases students left early or did not follow the guidance and mistakenly left them running. AWS support credited these accounts, so in the end nobody should have been out of pocket.

It is not only novices that can get caught out. AWS Chief Evangelist Jeff Barr ran up unexpected charges when he "created a DB cluster for testing, but I was logged into my personal AWS account, not my official one. Time to talk to support," [6]he said .

Oops! Created a DB cluster for testing, but I was logged in to my personal [7]#AWS account, not my official one. Time to talk to support, and to use a budget (already had an alarm for half of my usual bill, which fired mid-month as expected). [8]pic.twitter.com/YKEVysYDBh — Jeff Barr ☁️ (@ 🏠 ) 💉 (@jeffbarr) [9]March 3, 2021

There's no limit

Contacting support with a sob story is all very well, but why not have accounts that have hard spending limits so this cannot happen?

AWS does provide mechanisms for preventing cost overruns, primarily via email alerts which users can configure. It is even possible to set up automation so that the billing alert will automatically shut down instances, though this is relatively advanced (given that free tier issues are often encountered by novices).

There are [10]caveats though : "If you launch more AWS resources than the AWS Free Tier covers in a short period of time, you can exceed the AWS Free Tier limits before AWS can proactively notify you about exceeding the AWS Free Tier usage limits," the docs explain.

[11]

According to Quinn, "due to the massive complexity that is the AWS billing system — billing alarms are on a one-day delay (give or take a few hours) and many dollars short of your actual usage to that point."

What AWS calls the free tier actually has [12]three types of offering. Trials are short-term and transition to paid services; 12-month offers are in effect longer trials; and always free offers never expire.

One of the issues, though, is that using a single AWS service is rare: generally users will use several services together, and the company's tutorials naturally encourage this. Some of those services may be free, others may cost – and careless acceptance of defaults can mean relatively high costs.

[13]

Google Cloud Platform has similar issues and solutions, though it does offer guidance on automatically disabling spend over an entire account by [14]turning off billing , which disables all services. A [15]request to "limit spend per project by day/week/month" has been "under review" since 2015.

Microsoft Azure is perhaps the best in this respect. There is a feature called [16]spending limit that disables all services once reached, and this is applied by default to free trial accounts.

[17]Google Cloud confirms departure of EMEA president Chris Ciauri

[18]Oracle sues Envisage claiming unauthorized database use amid licensing crackdown

[19]Microsoft revokes MVP status of developer who tweeted complaint about request to promote SQL-on-Azure

That said, the spending limit cannot be applied to pay as you go accounts such as are likely to be used in production, only to various offers aimed at test and development. The full list is [20]here .

Anxiety over the free tier is something that students rather than enterprises suffer, but that does not make it unimportant. Controlling costs is something that every business needs to do, and the ability to set hard spending limits on accounts could be a useful part of that for test and development. Why is it not on offer?

The official line may be to avoid the risk of production applications being disabled unexpectedly, but provided the feature is optional, this should not be a problem. It is surprising that the issue has not been properly addressed.

The Register has asked AWS why there is no spending caps on accounts.®

Get our [21]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YLETm6tRzoVWOghBQW@8wwAAAMs&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YLETm6tRzoVWOghBQW@8wwAAAMs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YLETm6tRzoVWOghBQW@8wwAAAMs&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[4] https://twitter.com/forrestbrazeal/status/1389622850567421952

[5] https://www.lastweekinaws.com/blog/is-the-aws-free-tier-really-free/

[6] https://twitter.com/jeffbarr/status/1367142173620117506

[7] https://twitter.com/hashtag/AWS?src=hash&ref_src=twsrc%5Etfw

[8] https://t.co/YKEVysYDBh

[9] https://twitter.com/jeffbarr/status/1367142173620117506?ref_src=twsrc%5Etfw

[10] https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/tracking-free-tier-usage.html

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YLETm6tRzoVWOghBQW@8wwAAAMs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[12] https://aws.amazon.com/premiumsupport/knowledge-center/what-is-free-tier/

[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YLETm6tRzoVWOghBQW@8wwAAAMs&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[14] https://cloud.google.com/billing/docs/how-to/notify#cap_disable_billing_to_stop_usage

[15] https://googlecloudplatform.uservoice.com/forums/302595-compute-engine/suggestions/8518309-ability-to-limit-spend-per-project-by-day-week-mon

[16] https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/spending-limit

[17] https://www.theregister.com/2021/05/18/google_cloud_confirm_departure_of/

[18] https://www.theregister.com/2021/05/17/oracle_sues_envisage/

[19] https://www.theregister.com/2021/04/21/microsoft_revokes_mvp_status/

[20] https://azure.microsoft.com/en-us/support/legal/offer-details/

[21] https://whitepapers.theregister.com/

AWS - Automated Wallet Slimming?

2+2=5

Some text is required

Re: AWS - Automated Wallet Slimming?

Gordon 10

Siphoning.

Re: AWS - Automated Wallet Slimming?

Efer Brick

Slurping ?

Old game

b0llchit

Simply reminds me of Hotel California:

"... We are programmed to receive. You can check out any time you like. But you can never leave!"

My guess is that you should avoid to play in the first place or else you will get burned in one or the other way.

Anonymous Coward

"but in some cases students left early or did not follow the guidance and mistakenly left them running."

Yup sounds like students. Deserve what they get really.

Is that you , Jeff ?

PM.

Have some heart !

On the other hand , that student got valuable lesson what to expect from AWS.

spending limit cannot be applied to pay as you go ...in production,

Gordon 10

For the above I think this is reasonable of MS here.

By definition the act of releasing your code into Production should include impact analysis of the changes which should include a pretty robust assessment of the charging/scaling expectations, followed up by a period of aftercare where things like resource utlliization are monitored more closely than usual.

TL:DR. - Dont use the production tier if you dont use/understand SDLC.

SDLC along with real robust test plans are what separates software professionals from gifted* amateurs imo. Just because you have the job title and the pay grade don't mean you are, and lets face it we've all met even some very senior people who fall in this bucket - and take their colleagues/teams down with them.

* I leave it the reader to define what this means.

Re: spending limit cannot be applied to pay as you go ...in production,

IGotOut

"SDLC along with real robust test plans are what separates software professionals from gifted* amateurs imo"

The same professionals that think AWS is a Microsoft product?

Re: spending limit cannot be applied to pay as you go ...in production,

Matthew Brasier

The OP is talking about spending limits, which are a feature of Azure - which is a Microsoft Product, not AWS which I am sure they are aware is not.

Free tears

Howard Sway

What the article is describing is something that I thought was fairly obvious when I took a look at AWS to see what you got from the "free" tier. I mean, anything that insists on being supplied with payment card details before you can have it is obviously very much not "free", because you are giving them the authorisation and the means to take money off you. It's the shame shitty trick they pull with "free" Amazon Prime subscriptions. I mean, even the people with the most rudimentary programming knowledge here know how trivially easy it would be to write the code to just stop the service once the limit is reached. But they'll never do that because it might stop a few unsuspecting souls from being financially skimmed by Emperor Bezos, and this is obviously part of modern day "business models".

Re: Free tears

ShadowSystems

Which is why, if I were going to sign up for such a service, I'd use a PAYG refillable credit card as the payment instrument on file. If I like the service then I'll keep the card topped up to pay for said service. If I try to kill the service but don't dot every t & cross every i then they can't try to bankrupt me for not getting it right. If some process runs away & tries to cost a few hundred thousand bucks then AWS will be up shit creek when the attempted charge riccochets in their face.

Not that I ever intend on using anything offered by the Bezos Behemoth, I'd rather not give that rich bastard a single penny.

Re: Free tears

A Non e-mouse

The other side to this coin are the companies that let you sign up easily online but make you call a premium rate number to cancel the service.

Re: Free tears

Alan Bourke

"If some process runs away & tries to cost a few hundred thousand bucks then AWS will be up shit creek when the attempted charge riccochets in their face."

And you'll still be legally on the hook for the cost, burner card or not.

"free"

cantankerous swineherd

looks like one for trading standards.

Re: "free"

IGotOut

Not really. It is free, so long as you don't leave the very strict criteria.

You can't really trust caps either though...

Aaiieeee

A couple of years back I racked up £300 mobile data charges for going over my free allowance despite having a £50 cap on my account. I complained and was told the system can take a couple of days to log and process data usage so the cap doesn't take effect as soon as it's hit... The pricks happily ripped me off for 2 days at about £10 per MB and kindly gave me a small discount for having complained.

StevieD

"A strange game. The only winning move is not to play. How about a nice game of chess?"

WPOR on AWS

There are even worse sides to this

grizewald

A YouTuber who I follow recently had the credentials for his AWS account stolen. He had unwisely not enabled 2FA for the account either.

Armed with his account details, someone logged in to his account and set up an instance to run some crypto-coin mining software, doing so in the middle of the night while the victim was asleep. By the time he woke up and checked his email, the fraudster had already managed to rack up a $500 bill which is now the unfortunate victim's responsibility to pay. They had even set up the mining instance in such a way that the victim could not stop or remove it which resulted in some panic-stricken calls to AWS support.

I haven't heard whether he managed to get any reduction of his bill from Amazon. Even if he does, it was a painful way to learn that 2FA should be mandatory on any Internet service which can rack up a huge bill while you're not even awake to receive an emailed alert.

Ol'Peculier

We use AWS for a few things, and at one point I was running a MSSQL database with them which I've since removed all trace of. On our monthly bill there is still a charge of about $1.50 itemised to this service.

It's such a small amount I can't be arsed to chase it but I wonder how many others are billed the same thing for ghost processes?

The ideas of economists and political philosophers, both when they
are right and when they are wrong, are more powerful than is generally
understood. Indeed, the world is ruled by little else.
-- John Maynard Keynes