Outcome
By the end of this lesson, you will be able to explain why every cloud bill is at least 24 hours behind real time, and pick the right granularity band for any cost question.
| Tier | Operator |
| JTBD | ”Tell me what we spent today: and don’t lie.” |
| Personas | Platform Engineer · FinOps Analyst · Engineering Leader |
| Prerequisites | L1, L2 |
| Time | 7 minutes |
| Bloom verb | Explain (Understand) |
1. Concept
Every cloud bill arrives late, and all three providers are late in the same way.
Usage events are measured, then priced against the rate card, then checked against any commitments you have bought, and only then written to the bill. That pipeline takes hours, and the numbers settle a day later.
The delay is the price of an accurate bill rather than a flaw. Make the bill publish faster and something has to give. The charge gets attributed to the wrong resource. A commitment gets applied to the wrong usage. Or last night’s figures quietly change this morning, as late events arrive.
Two words run through this lesson. Granularity is how finely the data is cut: by hour or by month, by resource or by whole account. Timeliness is how recent it is. You do not get both at once, and this lesson is about choosing.
The three bands
BAND LATENCY GRANULARITY COST QUESTION IT ANSWERS────────────────────────────────────────────────────────────────────────────LIVE (calculated) 0 seconds Per resource "What is running right now, priced at the rate card?"DAILY BILLING 18-36 hrs Per resource "What was actually charged yesterday?"MONTHLY SETTLED 3-10 days Per resource "What is the final past month closing authoritative invoice?"Live, calculated. Current state, what is running, what shape it is, where it sits, multiplied by the public rate card. Available instantly, and always at list price. The number is real, but it is not the bill. In ZopNight this is the cost_usd column: see L1 of M0.4.
Daily billing. What the provider actually charged for yesterday, after discounts and after any commitments were applied. Available 18 to 36 hours once the day closes. In ZopNight this is the actual_cost_usd column, once billing sync is switched on.
Monthly settled. The closed invoice. Providers revise earlier daily figures as late measurements and commitment adjustments arrive, so this is the only number that stops moving. Final somewhere between the 5th and the 10th of the following month.
The mistake everyone makes once
A finance partner sees real-time cost in a dashboard and asks engineering to reconcile it against the cloud invoice. The two numbers do not match, and the tool gets blamed.
Nothing was wrong. The dashboard showed live calculated cost, which is list price. The invoice showed daily billing, which is after discounts. Both are accurate answers to different questions.
The fix is labelling. A figure presented as “$1,247 today” without saying which kind of $1,247 will eventually cost somebody their credibility in a finance meeting. ZopNight labels both on the Reports summary: see the two-source cost model.
Pick the band by the question
QUESTION → BAND─────────────────────────────────────────────────────────────"Are we leaving things on right now?" → LIVE"What did EC2 cost yesterday?" → DAILY BILLING"What did EC2 cost last month, final?" → MONTHLY SETTLED"Anomaly happening in the last hour?" → LIVE (with a 24h check)"Variance vs budget for the closed month?" → MONTHLY SETTLED"Did the new schedule save what we expected?" → DAILY BILLING, week-over-weekOne error is common enough to name. Budgets are set against billed amounts, which are after discount. Live figures are list price, which is before discount. Report one against the other and every team appears 15 to 40 percent over budget while actually being on track, and you will spend a week explaining it.
2. Demo
The same EC2 instance, three bands at the same wall-clock moment (10:00 AM Tuesday, two days into the month):
| Source | Number | Interpretation |
|---|---|---|
| Pricing API × hours running this month so far | $98.40 | Live, calculated, rack rate, no discount |
| AWS Cost Explorer for yesterday (Monday) | $3.84 | Billed for one day, post-discount |
| AWS CUR for the past three days, summed | $11.20 | Billed, post-discount, but Sunday’s last 4 hours may still be re-rating |
Three correct numbers. Three different questions answered.
(Asset to produce: side-by-side screenshot of ZopNight Reports showing live rack-rate trend and daily billing trend with the labelled gap between them. Path: assets/screenshots/M0.1_L3_three_bands.png.)
3. Hands-on (5 min)
- Pick one running EC2 / Compute Engine / Azure VM.
- Compute the live rack rate manually:
hourly_rate × hours_since_month_start. The hourly rate is at the provider’s pricing page. - Pull yesterday’s billed cost for the same resource using the CLI block from L2.
- Multiply yesterday’s billed cost by the number of days elapsed this month.
- Compare the two numbers. The gap is the effective discount running on this resource.
If the live rack rate is lower than the billed-cost-times-days estimate, the instance was running fewer hours than wall-clock would suggest (a schedule fired) or the rate card published today differs from yesterday’s (rare but happens at major price changes).
4. Knowledge check
Q1
A vendor advertises “real-time cloud cost.” This is most accurately interpreted as:
A. Cloud providers publish hourly bills now
B. The vendor is computing live rack rate from the pricing API
C. The vendor has direct access to AWS internal metering
D. The vendor is approximating, badly
Show answer
Correct: B. The actual bill is still 24+ hours lagged. Live cost is always calculated, not billed. Providers do not publish sub-daily bills. A is wrong (no provider does this). C is fantasy (no vendor has internal metering access). D is too cynical; calculated live cost is a real and useful number; it is just not the bill.
Q2
A team reports that their FinOps tool shows $14,000 spent today, but the AWS console shows $11,200 for the month so far including today. Which is most likely true?
A. The FinOps tool is broken
B. The console is showing billed cost (post-discount, lagged); the FinOps tool is showing live rack rate (pre-discount)
C. AWS Cost Explorer is broken
D. The team is querying the wrong AWS account entirely, so the two totals are covering different estates
Show answer
Correct: B. Both are correct. This is the textbook live-vs-billed mismatch. The gap of ~25% is consistent with typical effective discount (RI + Savings Plan + sustained-use). The team needs to read which column they are looking at.
Q3
Budget variance reports should be sourced from which band?
A. Live calculated
B. Monthly settled
C. Whichever one happens to be highest
D. Daily billing (rolled to month-to-date)
Show answer
Correct: D. Budgets are set against billed amounts. Daily billing rolled MTD is the correct match. Monthly settled is too late for in-flight management. Live calculated is rack rate, mismatched against a billed budget.
5. Apply
ZopNight separates the two bands explicitly on every report. The Reports header carries a Cost Source label; Unblended Cost when billing sync is active, Rack Rate when not. The Reports → Trend chart can split a data point into actualCostUsd and calculatedCostUsd so the gap is visible.
Anomaly detection is a daily cron (20:55 UTC), not a real-time stream. It evaluates the previous full day, preferring billed cost where the billing overlay has landed and falling back to live calculated cost where it has not. That is why an anomaly surfaces the day after the spend, not the minute of it.
Open ZopNight Reports → Trend (deep link)
Related lessons
- L2: Pick your billing source
- L4: Tags, labels, and the cost-attribution problem (next)
- T0.M0.4.L4: The two-source cost model
- T2.M2.10: Cost anomaly detection
Rule references
RC-001Idle EC2; uses calculated cost for the live signal, billed cost for the verified savings
Glossary terms touched
Live calculated cost · Daily billing · Monthly settled · Effective discount