detect_bill_anomalies
Detects unusual cloud bill spikes, drops, and new spend from a local FOCUS CSV by comparing each service's cost with its recent normal, ranked by excess cost.
Instructions
FinOps anomaly management on the user's actual bill (a local FOCUS 1.x CSV export; nothing is sent anywhere). Compares each service's daily (or monthly) cost with its own recent normal and reports spikes, drops and new spend as events, ranked by excess cost, flagging events still going in the latest period. Use for: 'what blew up our bill', 'did anything unusual happen last week', 'what new spend appeared'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| group_by | No | ServiceName | |
| file_path | Yes | Local path to a FOCUS export, .csv or .csv.gz. | |
| min_impact | No | Ignore moves smaller than this, in billing currency. | |
| sensitivity | No | moderate |