r/FinOps

Context: I am an eng at a startup that just raised a Series, where about 10 eng are doing a lot of work, and quickly. I have been asking around and monitoring my Cursor/Anthropic costs, and it seems that an eng spends between $1k and $4k a month on AI usage on their preferred platform. Since we raised and have money, it's not really a concern for us. Also, we are shipping a lot, so it seems to be worth it. But that's not the case for all startups.

Does your company monitor eng token spend on platforms like Codex, Claude Code, or Cursor? How are companies budgeting for it?

Hi everyone,

I’m looking for advice from people who have experience with Azure for Startups / Azure billing, especially unexpected high bills.

Our company is enrolled in Microsoft for Startups, and we were working toward the workload requirements for additional Azure credits. We created multiple workloads for this purpose.

We recently discovered that our Azure bill for the period was around ₹10–11 lakh (~$12k USD).

The surprising part is the cost breakdown. The major contributors were:

• Azure Virtual Enclaves: ~₹5.58 lakh - $5580
• Azure Firewall: ~₹4.19 lakh - $4190
• Azure Bastion: ~₹0.97 lakh - $970
• PostgreSQL: ~₹0.48 lakh - $480
• Total: roughly ₹11 lakh - $11k

So approximately ₹10.7 lakh ($11k) came from Enclaves + Firewall + Bastion.

From what we're now understanding, the Enclave deployment provisioned a fairly substantial networking/security architecture around the workloads, including Azure Firewall, Virtual WAN/Virtual Hub, Firewall Policies, etc. The Activity Log shows the Azure Firewall creation/update operations being performed by Mission Enclave rather than individual user accounts.

Our original intention was simply to maintain the required Azure workloads for the Startup credit milestone. We were not expecting the workload requirement to result in this level of infrastructure cost.

We are now trying to understand:

1. Are Azure Firewall and the other networking components automatically provisioned when using Azure Enclave?
2. Is Bastion automatically created or is it an optional component?
3. Is there a lower-cost way to satisfy the Microsoft for Startups workload requirement without deploying this entire networking architecture?
4. Has anyone successfully obtained a billing adjustment, Azure credit, or refund for a situation like this?
5. Should we open a normal Azure Billing Support ticket, Microsoft for Startups support ticket, or both?
6. Is there anything specific we should include in the refund/adjustment request?

We're obviously going to be much more careful before creating any additional workloads. We haven't intentionally tried to consume resources at this scale; the high costs came from the infrastructure associated with the deployment.

If anyone has dealt with Microsoft in a similar situation, I'd really appreciate advice on the best way to approach the billing support case and whether a refund/credit is realistic.

You can see every dollar, tag every resource, and build beautiful allocation reports — and still get surprised at month end because nobody acted on what the dashboard was telling them.

Visibility without ownership isn't FinOps, it's just prettier confusion.

Anyone else feel like the tooling has gotten way ahead of the culture change that actually makes it work?

Love to know more and learn. As we have build our product using the pain points and learnings - would like to hear more on this.