CloudWatch pipelines added GeoIP, RDS and XML processors on 19 August 2026 at a metering fork
AWS says the three new CloudWatch pipelines processors cost nothing extra. The pipelines documentation says S3 and third-party sources are metered after processing, so every enriched byte is billed as a Custom log.