Hello @Aaron Caudle,
You are at the right place. With Security Copilot pricing, it is charged hourly per SCU. Doesn't really matter how much of the SCU is consumed, so the cost you are seeing is expected. Security Compute Units (SCUs) power Security Copilot workloads and are billed hourly. To test and learn you can provision as minimum as 1 SCU. More advanced tasks, like Logic Apps automation, may use 5+ SCUs. Explore additional resources and use cases: Microsoft Security Copilot – Microsoft AdoptionIf you’re just getting started, we recommend provisioning 3 SCUs - enough to explore Security Copilot without overcommitting resources. For pricing details: https://azure.microsoft.com/en-us/pricing/details/microsoft-security-copilot/
If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.