"MetricStorage:AWS/Logs-EMF" cost without line_item_resource_id

MetricStorage:AWS/Logs-EMF is the cost associated to sending custom metrics to CloudWatch using the "Embedded Metric Format", which is a special syntax to structure your logs to automatically extract metrics from them. Typical sources of EMF logs are containers and lambdas, for example if you use advanced monitoring on your lambdas, or emit logs in structured format from your lambdas. Likewise, if you activate container insights, it will emit some metrics using this format.

Hi, I don't think there is a direct way to establish the relationship. When you browse your list of metrics in the CloudWatch console, if you have high counters of metrics in the Lambda insights or container insights namespaces, that would be a way to identify high contributors to that usage. If there are any custom metrics created by EMF logs that you emit yourself, they would go in the namespace you have set in the EMF logs. Generally speaking, the counters on the metrics list allow you to detect high usage in a namespace or metric name (e.g. high number of dimensions on a same metric name).