v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB

Cloud Cost Management

List cost anomalies

List detected Cloud Cost Management anomalies for the organization.

get/api/v2/cost/anomalies

Query parameters

startinteger

Example:1730259950000

Start time as Unix milliseconds. Defaults to the start of the latest stable seven-day window.

endinteger

Example:1730429150000

End time as Unix milliseconds. Defaults to the end of the latest stable seven-day window.

filterstring

Example:{"team":["payments"]}

Optional JSON object mapping cost tag keys to allowed values, for example {"team":["payments"],"env":["prod"]}. Filters match anomaly dimensions or correlated tags.

min_anomalous_thresholdstring

Example:1.0

Minimum absolute anomalous cost change to include. Numeric value; defaults to 1.

min_cost_thresholdstring

Example:0.0

Minimum absolute actual cost to include. Numeric value; defaults to 0.

dismissal_causestring

Example:none

Filter by resolution state. Use none for unresolved anomalies, all or * for resolved anomalies, or a comma-separated list of causes.

order_bystring

Example:anomalous_cost

Sort field. One of start_date, end_date, duration, max_cost, anomalous_cost, or dismissal_date. Defaults to anomalous_cost.

orderstring

Example:desc

Sort direction. One of asc or desc. Defaults to desc.

limitinteger

Example:200

Maximum number of anomalies to return. Defaults to 200.

offsetinteger

Pagination offset. Defaults to 0.

provider_idsstring[]

Optional repeated cloud or SaaS provider filters, such as aws, gcp, azure, Oracle, datadog, OpenAI, or Anthropic.

[
  "aws"
]

Response

Example response

{
  "data": {
    "attributes": {
      "anomalies": [
        {
          "actual_cost": 3001.24,
          "anomalous_cost_change": 1250.75,
          "anomaly_end": 1730429150000,
          "anomaly_start": 1730259950000,
          "correlated_tags": {
            "region": [
              "us-east-1",
              "us-west-2"
            ]
          },
          "dimensions": {
            "service": "ec2"
          },
          "dismissal": {
            "cause": "false_positive",
            "dismissal_id": "12345678-1234-1234-1234-123456789abc",
            "message": "This was expected due to planned infrastructure changes.",
            "updated_at": 1730344150000,
            "updated_by": "user@example.com"
          },
          "max_cost": 5000.5,
          "provider": "aws",
          "query": "sum:aws.cost.net.amortized{aws_cost_type IN (Usage,DiscountedUsage,SavingsPlanCoveredUsage) AND aws_product NOT IN (supportenterprise) AND service:\"ec2\"}.rollup(sum, daily)",
          "uuid": "b0a6aaa9-3c4c-48cb-9447-a0d1338b3e09"
        }
      ],
      "avg_daily_anomalous_cost": 625.375,
      "total_actual_cost": 3001.24,
      "total_anomalous_cost": 1250.75,
      "total_count": 1
    },
    "id": "anomalies",
    "type": "anomalies"
  }
}