A guide to AWS Config pricing, recording options, and how SecurityHub rollouts silently increase your bill.