Your AWS bill shows CloudWatch at $400 this month. You have 15 ECS services logging INFO-level with retention set to Never Expire. You didn't configure this — ECS did it by default.
The fix takes 4 steps.
Why CloudWatch silently eats your bill
ECS uses the awslogs driver by default. Every container's stdout goes to CloudWatch. ECS creates log groups with no retention policy — Never Expire — so logs accumulate forever.
Here's what that looks like for a typical 15-service fleet:








