How do I analyse what drives Identity & Access Management "Hourly Tokens" cost?
Summary:
How do I analyse what drives Identity & Access Management "Hourly Tokens" cost? Default-domain AuditEvents don't seem to cover the relevant activity.
Content (please ensure you mask any confidential information):
I'm trying to understand what's actually being billed by the IDENTITY_AND_ACCESS_MANAGEMENT service line "Identity and Access Management - Token" SKU (B93497, priced per "Hourly Tokens"). In our default identity domain it accounts for ~98% of IAM cost, and we can't explain either the baseline or the daily pattern from the audit data available to us.
What we've done so far using FOCUS cost reports + the Identity Domain AuditEvents API:
Tagged:
0