Alerting is one of the 5 A's of Cloud Security. There are countless metrics you can alert on in AWS, but the most important is the budget. Most developers I speak to don't equate spend to
cost management
A collection of 2 posts
Block expensive AWS actions with SCPs
Block expensive and long-running AWS API calls by denying AWS IAM actions.