Provider deep dive / Microsoft Azure
Azure Cost Management in 2026: native tools, Hybrid Benefit, and the optimisation levers
Azure has the simplest free cost tooling of any major cloud and the most powerful single discount lever in the Hybrid Benefit. This is the Azure-specific reference: tools side by side, discount mechanisms in one ranked table, the hidden charges, and a playbook you can run quarterly.
Tool inventory / 8 native cost tools
Every Azure cost tool
| Tool | Cost | What it does | What it cannot do |
|---|---|---|---|
| Cost Management + Billing | Free, no per-API charge | Daily granularity, budgets, exports, multi-subscription view, AWS connector. | Hourly granularity requires export to Log Analytics. |
| Azure Advisor | Free | Cost, security, reliability, and performance recommendations across resources. | Limited cost detail without Cost Management context. |
| Azure Monitor | Consumption-based ($2.76/GB ingestion) | Resource utilisation metrics for rightsizing. | Log Analytics ingestion can itself become a hidden cost. |
| Cost alerts and budgets | Free | Email and webhook alerts at percent-of-budget thresholds. | Action-based blocking requires Logic Apps or Functions. |
| Pricing Calculator | Free | What-if pricing before deployment, including Hybrid Benefit toggle. | List rate only. Does not reflect EA or MCA discounts. |
| Azure Migrate | Free assessment, $1.65/server/month for Discovery (after free trial) | TCO assessment for on-prem to Azure, including Hybrid Benefit savings. | Cloud-to-cloud migrations are out of scope. |
| Power BI Cost Management connector | Free (Power BI licence applies) | Custom executive dashboards on top of cost data. | Requires data modelling skills. |
| AWS connector for Cost Management | 1% of monitored AWS spend | AWS costs displayed alongside Azure costs in Azure portal. | Subset of AWS dimensions. Not a substitute for Cost Explorer. |
Discount stack / six commitment instruments
Azure discount mechanisms
Reserved VM Instances
up to 72%- Commitment
- 1 or 3 years
- Flexibility
- Locked to family or instance + region.
Apply to VM, App Service, SQL, Cosmos, Synapse, and others.
Azure Savings Plan for compute
up to 65%- Commitment
- 1 or 3 years, hourly $ commit
- Flexibility
- Across VM families, regions, and OS.
Slightly less ceiling than RIs in exchange for full flexibility.
Azure Hybrid Benefit
40-80% on eligible VMs- Commitment
- Existing on-prem licences
- Flexibility
- Windows Server, SQL Server, RHEL, SLES.
Stacks with RIs. The single biggest lever for Microsoft-heavy estates.
Dev/Test pricing
up to 55%- Commitment
- EA / Visual Studio subscription
- Flexibility
- Non-production workloads only.
Common gap. Audit which subscriptions are eligible.
Spot VMs
up to 90%- Commitment
- none
- Flexibility
- Eviction-based with 30-second notice.
Use for batch, AKS spot node pools, and Azure Batch workloads.
Enterprise Agreement (EA) / MCA
Negotiated- Commitment
- Annual or multi-year commit
- Flexibility
- Stacks on RIs and Hybrid Benefit.
Includes Microsoft Cost Optimisation Workshop credits in many tenants.
Surprise line items / not on the pricing page
Azure-specific hidden cost catalogue
Eight charges that frequently surprise Azure customers. Each row pairs the list rate with a quick avoidance strategy.
| Item | List rate | How to avoid it |
|---|---|---|
| Azure Firewall Standard | $1.25/hour ($912.50/mo) + $0.016/GB processed | Use NSGs and Application Gateway WAF for simpler patterns. Premium tier is $1.75/hour and adds IDPS. |
| Log Analytics ingestion | $2.76/GB after 5 GB/day free per workspace | Drop verbose container logs at source, use Basic Logs tier ($0.65/GB) for archive-style retention, set table-level retention. |
| Azure AD Premium | P1 $6/user/mo, P2 $9/user/mo | Audit assigned licences quarterly. Many tenants over-license P2 for users who only need P1 features. |
| Bandwidth above 100 GB/mo free | $0.087/GB outbound first 10 TB | Use Azure Front Door or CDN for high-volume egress. Co-locate chatty workloads in the same region. |
| Azure DevOps parallel jobs | $40/mo per additional Microsoft-hosted agent | Use self-hosted agents on Spot VMs for high-volume CI/CD. |
| Key Vault operations | $0.03 per 10k operations, secrets $1/mo each | Cache secrets in memory with appropriate refresh windows. Audit unused vaults. |
| App Service Always On | Requires Basic ($0.075/hour) or higher | Use Premium V3 with auto-scale rules instead of always-on Basic instances if traffic is bursty. |
| Public IP addresses (Standard SKU) | $3.65/mo each | Audit unattached IPs monthly. Use NAT Gateway with shared public IPs where possible. |
Optimisation playbook / six moves ranked by impact
Azure savings playbook
Audit every workload for Azure Hybrid Benefit eligibility
Typical impact: 40-80% on eligible VMs
Existing Windows Server and SQL Server licences with Software Assurance can apply to Azure VMs. The Cost Management Hybrid Benefit calculator surfaces eligible resources. RHEL and SLES BYOS options exist for Linux estates.
Achieve 60-80% Reserved Instance and Savings Plan coverage on stable workloads
Typical impact: 30-65%
Azure recommends Reserved Instances for steady workloads and Savings Plans for variable composition. A blended portfolio is normal: RIs on database tier, Savings Plans on app tier.
Switch fault-tolerant tiers to Spot VMs
Typical impact: 60-90%
AKS spot node pools, Azure Batch jobs, and CI runners tolerate eviction with 30-second notice. Use a low-priority node pool with appropriate taints and tolerations.
Tier blob storage Hot to Cool to Cold to Archive
Typical impact: 20-90% on cold data
Lifecycle management policies move blobs based on last-access time. Archive is $0.00099/GB/month but has minimum 180-day retention.
Use B-series burstable VMs for low-utilisation workloads
Typical impact: 20-50%
Dev, test, and small production tiers with sub-30% CPU utilisation often run cheaper on B-series. Monitor credit balance to avoid throttling.
Right-size with Azure Advisor recommendations
Typical impact: 10-25%
Advisor flags VMs running below 5% CPU. Apply recommendations cautiously: latency-sensitive services may need rightsizing tested before production.
Common questions
FAQ
What is Azure Hybrid Benefit and how much does it save?+
Azure Hybrid Benefit lets you reuse existing on-prem Windows Server and SQL Server licences with Software Assurance on Azure VMs, AKS, App Service, SQL Database, SQL Managed Instance, and others. On Windows Server it removes the OS licence portion (typically 40% of VM cost). On SQL Server Enterprise it can save 80% versus pay-as-you-go. Stack with Reserved Instances for compounding effect.
When should I pick Azure Savings Plans over Reserved Instances?+
Azure Savings Plans win when workload composition is uncertain (family migrations, region expansion, OS shifts). Reserved Instances win when the configuration is stable for the full 1 or 3-year term and the extra ceiling matters. For most teams a blended approach is right: RIs on the database tier, Savings Plans on the application tier.
Are Azure native cost tools really free?+
Yes. Cost Management + Billing has no per-API charge, unlike AWS Cost Explorer. The catch is Log Analytics, which is consumption-priced at $2.76/GB ingestion after the 5 GB/day free tier. Many cost data exports route through Log Analytics, which can become a hidden cost in itself. Use storage account exports for long-term retention to avoid this.
Why is Azure Firewall so expensive?+
Standard tier costs $1.25/hour ($912.50/mo) for the deployment plus $0.016/GB of processed traffic. The fixed cost runs whether or not the firewall sees traffic. For simpler architectures, NSGs (free) plus Application Gateway WAF v2 ($0.443/hour, $0.0072/GB) often deliver the same security posture at a fraction of the cost.
Does the EA or MCA actually move list prices?+
Both Enterprise Agreement and Microsoft Customer Agreement contracts can include negotiated discounts beyond standard list, especially for $1M+ annual commits or strategic workloads. Standard EA discount is single-digit percentage; strategic agreements can include double-digit. Cost Optimisation Workshop credits and Azure Migrate credits are also commonly negotiated as soft commits.
Continue reading