Custom metrics and agent-collected telemetry are billed per metric series and per data point, and alert-triggered actions may invoke external systems that charge per request. A misconfigured or compromised workload can publish high-cardinality metrics or fire alerts at high frequency, and the resulting charges accrue before the pattern is detected. This impacts the availability of the monitoring budget and of systems whose scaling depends on it.
Telemetry Volume Inflates Monitoring Costs
CCC.Monitor.TH06
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.CP01 | Custom Metric Ingestion | The service can receive user-defined, numeric time-series data points pushed by applications or external systems through its API, in addition to the metrics it collects automatically from provider resources. |
| CCC.Monitor.CP10 | Alert-Triggered Actions | The service may be configured to invoke an automated action, such as a workflow, a function, or a scaling operation, when an alert condition is met, in addition to emitting a notification. |
| CCC.Monitor.CP11 | Integration with External Tools | The service may be configured to forward alerts, notifications, and metric data to external systems such as incident management, ticketing, or third-party observability platforms. |
| CCC.Monitor.CP12 | Agent-Based Telemetry Collection | The service can collect metrics and traces from compute instances through a provider-supplied agent that runs on the instance and authenticates to the service using the instance identity or a configured credential. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.CN06 | Scope Telemetry Publishing Permissions | Ensure that an identity can publish telemetry only for the resources it owns, so that a compromised workload or agent cannot fabricate telemetry about other systems or create unbounded metric series. |
| CCC.Monitor.CN08 | Restrict Telemetry Destinations and Action Targets | Ensure that telemetry is forwarded only to approved external systems and that alerts can invoke only approved actions with least-privilege identities. |
| CCC.Monitor.CN10 | Alert on Telemetry Ingestion Volume | Ensure that a flood of metric series or data points is detected before the resulting charges accrue. |