The notification came in via Slack on the first Monday of the month: "AWS Forecast: Estimated bill exceeds threshold by 45%." Opening Cost Explorer, the culprit wasn't EC2 or RDS, wh…