2672 07 Ab Cost Estimate C32d913b

# 💰 As-Built Cost Estimate: terraform-e2e

![Step](https://img.shields.io/badge/Step-7g-blue?style=for-the-badge)
![Status](https://img.shields.io/badge/Status-Draft-orange?style=for-the-badge)
![Agent](https://img.shields.io/badge/Agent-As--Built-purple?style=for-the-badge)

<details open>
<summary><strong>📑 As-Built Cost Contents</strong></summary>

- [💵 Cost At-a-Glance](#-cost-at-a-glance)
- [✅ Decision Summary](#-decision-summary)
- [🔁 Requirements → Cost Mapping](#-requirements--cost-mapping)
- [📊 Top 5 Cost Drivers](#-top-5-cost-drivers)
- [🏛️ Architecture Overview](#️-architecture-overview)
- [🧾 What We Are Not Paying For (Yet)](#-what-we-are-not-paying-for-yet)
- [⚠️ Cost Risk Indicators](#️-cost-risk-indicators)
- [🎯 Quick Decision Matrix](#-quick-decision-matrix)
- [💰 Savings Opportunities](#-savings-opportunities)
- [🧾 Detailed Cost Breakdown](#-detailed-cost-breakdown)
- [References](#references)

</details>

> Generated by as-built agent | 2026-02-26

<div align="center">

| ⬅️ Previous                                        | 📑 Index            | Next ➡️ |
| -------------------------------------------------- | ------------------- | ------- |
| [07-compliance-matrix.md](07-compliance-matrix.md) | [README](README.md) | —       |

</div>

**Generated**: 2026-02-26
**Source**: Deployed Terraform resources + design-time estimate artifact
**Region**: swedencentral
**Environment**: dev
**IaC Reference**: [../../infra/terraform/terraform-e2e/](../../infra/terraform/terraform-e2e/)

## 💵 Cost At-a-Glance

> **As-built monthly total: Pending verified repricing**
>
> The design-time estimate in [03-des-cost-estimate.md](./03-des-cost-estimate.md) was **~$25–$60/month**,
> but the deployed architecture changed from **B1** to **P1v3** App Service Plan, which materially changes total cost.

| Status | Indicator |
| ------ | --------- |
| Cost Trend | ⬆️ Increased vs design due to App Service Plan SKU uplift |
| Savings Available | ✅ Available via right-sizing if P1v3 is not required |
| Compliance | ✅ Cost still within documented soft-budget posture pending final repricing |

## ✅ Decision Summary

- ✅ Implemented as-built stack with PremiumV3 App Service plan (`P1v3`, capacity 3)
- ⏳ Deferred exact dollar repricing pending validated pricing run for current SKU/region
- 🔁 Redesign trigger: move to production-grade private networking and/or multi-region DR

**Confidence**: Medium | **Expected Variance**: High until verified pricing run is completed

### Design vs As-Built Summary

| Metric | Design Estimate | As-Built | Variance | Status |
| ------ | --------------- | -------- | -------- | ------ |
| Monthly Estimate | ~$25–$60 | Pending verified repricing | Expected increase | ⚠️ |
| Annual Estimate | ~$300–$720 | Pending verified repricing | Expected increase | ⚠️ |

## 🔁 Requirements → Cost Mapping

| Requirement | Architecture Decision | Cost Impact | Mandatory |
| ----------- | --------------------- | ----------- | --------- |
| 99.5%+ availability target | App Service Plan uplift to `P1v3` | Significant increase over B1 | Yes |
| Data protection and restore | Azure SQL Basic with geo backup redundancy | Moderate baseline | Yes |
| Security baseline | Key Vault RBAC + purge protection | Low incremental | Yes |
| Observability | App Insights + Log Analytics + Smart Detector | Variable ingestion-driven | Yes |

## 📊 Top 5 Cost Drivers

| Rank | Resource | Monthly Cost | % of Total | Trend | Optimization |
| ---- | -------- | ------------ | ---------- | ----- | ------------ |
| 1️⃣ | App Service Plan (`asp-terraform-e2e-dev`) | Pending | Pending | ⬆️ | Evaluate right-size to lower premium/standard tiers if policy allows |
| 2️⃣ | Azure SQL Database (`sqldb-terraform-e2e-dev`) | Pending | Pending | ➡️ | Monitor DTU utilization; keep Basic if sufficient |
| 3️⃣ | Application Insights (`appi-terraform-e2e-dev-3hpu`) | Pending | Pending | ⬆️/➡️ | Set ingestion caps and sampling controls |
| 4️⃣ | Log Analytics (`log-terraform-e2e-dev-3hpu`) | Pending | Pending | ⬆️/➡️ | Tune retention and ingestion volume |
| 5️⃣ | Key Vault (`kv-tfe2dev-3hpu`) | Pending | Pending | ➡️ | Usually low; monitor transaction count |

## 🏛️ Architecture Overview

As-built cost profile is dominated by the App Service compute tier selection (`P1v3`, 3 workers) rather than originally planned cost-optimized `B1`.

| Category | Cost Posture |
| -------- | ------------ |
| Compute | High relative share (expected dominant cost driver) |
| Data Services | Low-to-moderate |
| Monitoring | Variable by telemetry volume |
| Security | Low |

## 🧾 What We Are Not Paying For (Yet)

- Private endpoints and VNet integration for app/data services
- Multi-region active/passive duplication of full workload
- Additional premium security SKUs (beyond current baseline)
- Front Door/WAF service layer

## ⚠️ Cost Risk Indicators

| Resource | Risk Level | Issue | Mitigation |
| -------- | ---------- | ----- | ---------- |
| App Service Plan P1v3 | 🔴 High | Highest expected monthly spend driver | Re-validate capacity requirement and autoscale profile |
| App Insights / Log Analytics | 🟡 Medium | Telemetry ingestion spikes can increase spend | Apply sampling + daily cap governance |
| SQL Database | 🟡 Medium | Growth may force tier uplift | Track DTU/storage and pre-plan upgrade path |

## 🎯 Quick Decision Matrix

| Requirement | Additional Cost Direction | SKU/Config Change | Verdict | Notes |
| ----------- | ------------------------- | ----------------- | ------- | ----- |
| Maintain current premium compute posture | ⬆️ | Keep `P1v3` capacity 3 | 🟡 Monitor | Validate sustained utilization |
| Return to cost-optimized dev posture | ⬇️ | Downgrade plan tier/capacity | 🟢 Candidate | Requires capacity and policy validation |
| Production-ready network hardening | ⬆️ | Add private endpoints + networking | 🟡 Plan | Security/compliance trade-off |

## 💰 Savings Opportunities

- Right-size App Service Plan based on observed CPU/memory utilization windows.
- Enforce telemetry caps for App Insights and Log Analytics.
- Keep SQL Database at Basic unless validated workload demands exceed thresholds.

## 🧾 Detailed Cost Breakdown

### IaC / Pricing Coverage

| Signal | Value | Status |
| ------ | ----- | ------ |
| Deployed resources detected | 10 | ✅ |
| Major SKUs identified | App Service `P1v3`, SQL `Basic`, Log `PerGB2018` | ✅ |
| Verified as-built dollar pricing for all SKUs | Not available in this run | ⚠️ |

### Line Items (SKU-validated, price-pending)

| Category | Service | SKU / Meter | Quantity / Units | Est. Monthly |
| -------- | ------- | ----------- | ---------------- | ------------ |
| 💻 Compute | App Service Plan | P1v3 (PremiumV3) | Capacity 3 | Pending |
| 💻 Compute | App Services (2) | On shared P1v3 plan | 2 apps | Included in plan |
| 💾 Data Services | Azure SQL Database | Basic (5 DTU) | 1 app DB + master DB | Pending |
| 📊 Monitoring | App Insights | Workspace-based | 1 component | Pending |
| 📊 Monitoring | Log Analytics | PerGB2018, 30-day retention | 1 workspace | Pending |
| 🔐 Security | Key Vault | Standard | 1 vault | Pending |

### Notes

- This as-built estimate intentionally avoids unverified dollar figures for changed SKUs.
- A follow-up pricing pass is required to finalize exact monthly/annual totals for the deployed configuration.
- Design-time baseline remains available in [03-des-cost-estimate.md](./03-des-cost-estimate.md).

---

## References

| Topic | Link |
| ----- | ---- |
| Design estimate baseline | [03-des-cost-estimate.md](./03-des-cost-estimate.md) |
| Deployed resource evidence | [06-deployment-summary.md](./06-deployment-summary.md) |
| Azure pricing calculator | [Calculator](https://azure.microsoft.com/pricing/calculator/) |
| Cost management | [Overview](https://learn.microsoft.com/azure/cost-management-billing/costs/overview-cost-management) |

---

<div align="center">

| ⬅️ [07-compliance-matrix.md](07-compliance-matrix.md) | 🏠 [Project Index](README.md) | ➡️ — |
| ----------------------------------------------------- | ----------------------------- | ---- |

</div>