Management / Monitoring / Controls / v2026.11
Alert on Telemetry Ingestion Volume
CCC.Monitor.CN10 · Observability
Ensure that a flood of metric series or data points is detected before the resulting charges accrue.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.Monitor.CP01 | Custom Metric Ingestion | The service can receive user-defined, numeric time-series data points pushed by applications or external systems through its API, in addition to the metrics it collects automatically from provider resources. |
| CCC.Monitor.CP10 | Alert-Triggered Actions | The service may be configured to invoke an automated action, such as a workflow, a function, or a scaling operation, when an alert condition is met, in addition to emitting a notification. |
| CCC.Monitor.CP11 | Integration with External Tools | The service may be configured to forward alerts, notifications, and metric data to external systems such as incident management, ticketing, or third-party observability platforms. |
| CCC.Monitor.CP12 | Agent-Based Telemetry Collection | The service can collect metrics and traces from compute instances through a provider-supplied agent that runs on the instance and authenticates to the service using the instance identity or a configured credential. |
Related Threats
| ID | Title | Description |
|---|
| CCC.Monitor.TH06 | Telemetry Volume Inflates Monitoring Costs | Custom metrics and agent-collected telemetry are billed per metric series and per data point, and alert-triggered actions may invoke external systems that charge per request. A misconfigured or compromised workload can publish high-cardinality metrics or fire alerts at high frequency, and the resulting charges accrue before the pattern is detected. This impacts the availability of the monitoring budget and of systems whose scaling depends on it. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.Monitor.CN10.AR01 | When telemetry ingestion for the service exceeds a user-defined volume or series-count threshold, the service MUST generate an alert. | tlp-clear, tlp-green, tlp-amber, tlp-red |