Aurora
Terraform module to create AWS RDS Aurora resources
Charged while it exists
2These set the floor of the bill. They accrue from the moment they are created, even if nothing uses them.
RDS
aws_rds_clusterStorage and I/O for the cluster; the instances below it are charged separately. Serverless v2 bills per capacity unit hour instead.
RDS
aws_rds_cluster_instanceInstance hours per writer and reader.
Charged by usage
2These stay near zero until there is traffic, and are the hardest to predict from source alone.
CloudWatch Logs
aws_cloudwatch_log_groupPer GB ingested, then per GB stored for as long as retention keeps it. Retention set to never expire is the usual surprise.
RDS
aws_rds_cluster_activity_streamFree itself, but every event is written to Kinesis and to KMS, both of which bill for what arrives.
Not classified
1Not in the cost table yet, so they are reported rather than assumed free.
RDS
aws_rds_shard_group
No charge
13These carry no charge of their own, though some of them govern resources that do.
Application Auto Scaling
aws_appautoscaling_policyFree itself. Decides where between the minimum and maximum capacity the service actually sits, so it sets the bill within those bounds.
Application Auto Scaling
aws_appautoscaling_targetFree itself, and the single most useful number for the bill: the capacity bounds decide how many tasks or instances can ever run.
IAM
aws_iam_roleIAM
aws_iam_role_policy_attachmentRDS
aws_db_parameter_groupRDS
aws_db_subnet_groupRDS
aws_rds_cluster_endpointRDS
aws_rds_cluster_parameter_groupRDS
aws_rds_cluster_role_associationA setting on another resource rather than a resource that bills. Whatever it governs is where the charge lands.
Secrets Manager
aws_secretsmanager_secret_rotationVPC
aws_security_groupVPC
aws_vpc_security_group_egress_ruleVPC
aws_vpc_security_group_ingress_rule