Telemetry traffic has grown about 60× within the week, which raised WAF spend to ~$900 a month and fired a $117 cost anomaly incident. The anomaly alert fires on dollar impact alone, so ordinary growth will keep tripping it. Require both ≥ $200 and ≥ 100% above expected spend.