What AWS Cost Explorer reports or metrics should I monitor to track potential DDoS-related costs in CloudFront?

Monitor the following in AWS Cost Explorer: 1) **CloudFront Data Transfer OUT costs:** This is the primary cost driver during a DDoS attack. 2) **AWS WAF costs:** Track rule evaluations and web ACL usage. 3) **AWS Shield Advanced costs:** Monitor usage-based charges for traffic inspected during mitigation. 4) **EC2 costs (if your origin is EC2):** Increased traffic might strain your origin servers. Set up cost alerts to notify you of unexpected spikes in these metrics.