Azure CIS Security Recommendations -- Private Beta 

We are excited to announce our intent to offer security capabilities in the Azure platform based on the CIS Azure Foundations Benchmark. As we prepare for this support, we are looking for customers who want to be early users of the CIS Violation Report for Azure and provide feedback as the policies expand.

As part of the CIS private beta, CloudHealth has begun collecting asset metadata for a number of services, including Key Vaults (keys and secrets), Azure Active Directory (users and role definitions), SQL Server/Database (threat detection and transparent data encryption), and Azure subscription security policies. Please reach out to your Technical Account Manager with any questions.

If you would like to participate in this private beta, please contact azuresecurity@cloudhealthtech.com.

Cost Allocation by Billing Tags for Additional AWS Services -- Coming Soon 

As previously announced, we are developing a more comprehensive approach for extracting asset attributes from bills to allocate costs for taggable AWS services.

We will soon be using the tags and resource ID from your bill to automatically allocate Amazon GameLift, Amazon Kinesis Analytics, Amazon Lex, Amazon Simple Email Service, AWS Elemental MediaLive, AWS OpsWorks, AWS Shield, AWS Snowball, AWS Web Application Firewall costs and assets to the appropriate Perspective groups. Costs for these services will be distributed into the following direct charges:

• Elemental MediaLive - Data Transfer

• Elemental MediaLive - Input

• Elemental MediaLive - Output

• GameLift - Data Transfer

• Kinesis Analytics - KPU Hour

• Lex - Request

• OpsWorks - Node Hour

• Shield - CloudFront

• Shield - Elastic IP

• Shield - Load Balancing

• Shield - Subscription

• Simple Email Service - Dedicated IP

• Snowball - Data Transfer

• Snowball - Extra Day Charge

• Snowball - Service Fee

• WAF - Request

• WAF - Rule

• WAF - WebACL

And the following indirect charges:

• Elemental MediaLive - Input

• Elemental MediaLive - Other

• Elemental MediaLive - Output

• GameLift - Instance

• GameLift - Other

• Kinesis Analytics - Other

• Lex - Other

• OpsWorks - Other

• Service - Other

• Shield - Other

• Simple Email Service - Data Transfer

• Simple Email Service - Dedicated IP

• Simple Email Service - Email Message

• Simple Email Service - Incoming Mail Chunks

• Simple Email Service - Other

• Snowball - Extra Day Charge

• Snowball - Import/Export

• WAF - Other

• WAF - WebACL

• WAF - Request

• WAF - Rule

This allocation will be applicable to the past 13 months. We recommend that you save your cost and usage reports for reference. If you haven’t already, please enable all the tags in your bill that you use for Perspectives.

Learn more about activating user-defined cost allocation tags in this AWS Documentation article.

Update to Costs of EBS Snapshots -- Coming Soon

In the CloudHealth Platform, EBS Snapshots were previously accounted for as an indirect charge. The costs associated with EBS Snapshots will now be moving to a new direct charge: ‘EBS Snapshots’. Reallocation rules for the EBS Snapshots indirect charge will not be applicable after this change and all the costs will be distributed according to any Perspectives you build for EBS Snapshots.

Support for Additional AWS Services

Cost and asset allocations to appropriate perspectives and cost items were recently updated for AWS Glue, Amazon Appstream, Alexa For Business, AWS Certificate Manager, AWS IoT Analytics, AWS Secrets Manager, and AWS Storage Gateway. We now use the tags and resource ID from your bill to automatically allocate costs and assets to the appropriate Perspective groups. This allocation is applicable to the past 13 months as well.

Learn more about supported AWS services in this Help Center article.

New Indirect Charge for Elasticsearch RIs and Contact Center Telecommunications

We recently moved the costs for Elasticsearch RIs from ‘Elasticsearch - Other’ to ‘Elasticsearch RI Prepay’ and the costs for Contact Center from ‘Other’ to ‘Contact Center Telecommunications’.