Provider deep dive / Microsoft Azure
Azure Cost Management in 2026: native tools, Hybrid Benefit, and the optimisation levers
Azure has the simplest free cost tooling of any major cloud and the most powerful single discount lever in the Hybrid Benefit. This is the Azure-specific reference: tools side by side, discount mechanisms in one ranked table, the hidden charges, and a playbook you can run quarterly.
Tool inventory / 7 native cost tools
Every Azure cost tool
| Tool | Cost | What it does | What it cannot do |
|---|---|---|---|
| Cost Management + Billing | Free, no per-API charge | Daily granularity, budgets, exports, multi-subscription view. | Hourly granularity requires export to Log Analytics. |
| Azure Advisor | Free | Cost, security, reliability, and performance recommendations across resources. | Limited cost detail without Cost Management context. |
| Azure Monitor | Consumption-based ($2.76/GB ingestion) | Resource utilisation metrics for rightsizing. | Log Analytics ingestion can itself become a hidden cost. |
| Cost alerts and budgets | Free | Email and webhook alerts at percent-of-budget thresholds. | Action-based blocking requires Logic Apps or Functions. |
| Pricing Calculator | Free | What-if pricing before deployment, including Hybrid Benefit toggle. | List rate only. Does not reflect EA or MCA discounts. |
| Azure Migrate | Free assessment, $1.65/server/month for Discovery (after free trial) | TCO assessment for on-prem to Azure, including Hybrid Benefit savings. | Cloud-to-cloud migrations are out of scope. |
| Power BI Cost Management connector | Free (Power BI licence applies) | Custom executive dashboards on top of cost data. | Requires data modelling skills. |
Discount stack / six commitment instruments
Azure discount mechanisms
Reserved VM Instances
up to 72%- Commitment
- 1 or 3 years
- Flexibility
- Locked to family or instance + region.
Apply to VM, App Service, SQL, Cosmos, Synapse, and others.
Azure Savings Plan for compute
up to 65%- Commitment
- 1 or 3 years, hourly $ commit
- Flexibility
- Across VM families, regions, and OS.
Slightly less ceiling than RIs in exchange for full flexibility.
Azure Hybrid Benefit
up to 80% with RIs (Windows Server, Microsoft figure)- Commitment
- Existing on-prem licences
- Flexibility
- Windows Server, SQL Server, RHEL, SLES.
Stacks with RIs. The single biggest lever for Microsoft-heavy estates.
Dev/Test pricing
up to 55%- Commitment
- EA / Visual Studio subscription
- Flexibility
- Non-production workloads only.
Common gap. Audit which subscriptions are eligible.
Spot VMs
up to 90%- Commitment
- none
- Flexibility
- Eviction-based with 30-second notice.
Use for batch, AKS spot node pools, and Azure Batch workloads.
Enterprise Agreement (EA) / MCA
Negotiated- Commitment
- Annual or multi-year commit
- Flexibility
- Stacks on RIs and Hybrid Benefit.
Terms and any discount are set in the agreement; Microsoft publishes no schedule.
Surprise line items / not on the pricing page
Azure-specific hidden cost catalogue
Eight charges that frequently surprise Azure customers. Each row pairs the list rate with a quick avoidance strategy.
| Item | List rate | How to avoid it |
|---|---|---|
| Azure Firewall Standard | $1.25/hour ($912.50/mo) + $0.016/GB processed | Use NSGs and Application Gateway WAF for simpler patterns. Premium tier is $1.75/hour and adds IDPS. |
| Log Analytics ingestion | $2.76/GB after 5 GB/day free per workspace | Drop verbose container logs at source, use Basic Logs tier ($0.65/GB) for archive-style retention, set table-level retention. |
| Azure AD Premium | P1 $6/user/mo, P2 $9/user/mo | Audit assigned licences quarterly. Many tenants over-license P2 for users who only need P1 features. |
| Bandwidth above 100 GB/mo free | $0.087/GB outbound first 10 TB | Use Azure Front Door or CDN for high-volume egress. Co-locate chatty workloads in the same region. |
| Azure DevOps parallel jobs | $40/mo per additional Microsoft-hosted agent | Use self-hosted agents on Spot VMs for high-volume CI/CD. |
| Key Vault operations | $0.03 per 10k operations, secrets $1/mo each | Cache secrets in memory with appropriate refresh windows. Audit unused vaults. |
| App Service Always On | Requires Basic ($0.075/hour) or higher | Use Premium V3 with auto-scale rules instead of always-on Basic instances if traffic is bursty. |
| Public IP addresses (Standard SKU) | $3.65/mo each | Audit unattached IPs monthly. Use NAT Gateway with shared public IPs where possible. |
Optimisation playbook / six moves ranked by impact
Azure savings playbook
Audit every workload for Azure Hybrid Benefit eligibility
Typical impact: Up to 80% with RIs
Existing Windows Server and SQL Server licences with Software Assurance can apply to Azure VMs. The Cost Management Hybrid Benefit calculator surfaces eligible resources. RHEL and SLES BYOS options exist for Linux estates.
Achieve 60-80% Reserved Instance and Savings Plan coverage on stable workloads
Typical impact: 30-65%
Azure recommends Reserved Instances for steady workloads and Savings Plans for variable composition. A blended portfolio is normal: RIs on database tier, Savings Plans on app tier.
Switch fault-tolerant tiers to Spot VMs
Typical impact: 60-90%
AKS spot node pools, Azure Batch jobs, and CI runners tolerate eviction with 30-second notice. Use a low-priority node pool with appropriate taints and tolerations.
Tier blob storage Hot to Cool to Cold to Archive
Typical impact: 20-90% on cold data
Lifecycle management policies move blobs based on last-access time. Archive is $0.00099/GB/month but has minimum 180-day retention.
Use B-series burstable VMs for low-utilisation workloads
Typical impact: 20-50%
Dev, test, and small production tiers with sub-30% CPU utilisation often run cheaper on B-series. Monitor credit balance to avoid throttling.
Right-size with Azure Advisor recommendations
Typical impact: 10-25%
Advisor flags VMs running below 5% CPU. Apply recommendations cautiously: latency-sensitive services may need rightsizing tested before production.
Common questions
FAQ
What is Azure Hybrid Benefit and how much does it save?+
Azure Hybrid Benefit lets you reuse existing on-prem Windows Server and SQL Server licences with Software Assurance on Azure VMs, AKS, App Service, SQL Database, SQL Managed Instance, and others. Microsoft states that Windows Server customers can save up to 80% versus pay-as-you-go when Hybrid Benefit is combined with Reserved VM Instances, and SQL Server customers up to 85%. On its own, Hybrid Benefit removes the Windows licence charge, so the saving on a given VM is the gap between its Windows and Linux rates (in East US a D4s v5 lists at $0.376/hr with Windows and $0.192/hr without).
When should I pick Azure Savings Plans over Reserved Instances?+
Azure Savings Plans win when workload composition is uncertain (family migrations, region expansion, OS shifts). Reserved Instances win when the configuration is stable for the full 1 or 3-year term and the extra ceiling matters. For most teams a blended approach is right: RIs on the database tier, Savings Plans on the application tier.
Are Azure native cost tools really free?+
Yes. Cost Management + Billing has no per-API charge, unlike AWS Cost Explorer. The catch is Log Analytics, which is consumption-priced at $2.76/GB ingestion after the 5 GB/day free tier. Many cost data exports route through Log Analytics, which can become a hidden cost in itself. Use storage account exports for long-term retention to avoid this.
Why is Azure Firewall so expensive?+
Standard tier costs $1.25/hour ($912.50/mo) for the deployment plus $0.016/GB of processed traffic. The fixed cost runs whether or not the firewall sees traffic. For simpler architectures, NSGs (free) plus Application Gateway WAF v2 ($0.443/hour, $0.0072/GB) often deliver the same security posture at a fraction of the cost.
Does the EA or MCA actually move list prices?+
They can. An Enterprise Agreement or Microsoft Customer Agreement may include negotiated pricing below list, but Microsoft publishes no spend level at which a discount starts and no discount schedule; any rate is set in the agreement itself. Check the prices in Cost Management against the public Azure retail prices to see what your agreement actually changes.
Continue reading