All Libraries

Set up a cost budget and receive email alerts when spending approaches or exceeds your limits.

Identifies unused AWS resources to reduce cost, improve security, and eliminate unnecessary exposure.

Evaluates AWS cost controls, lifecycle policies, resource efficiency, certificate and domain hygiene, and stale-resource indicators across the environment.

Identifies unused Azure resources that can increase cost, clutter, and avoidable security exposure.

Run unused resources report and send a custom summary email to the team.

Validate Compute and EC2 Instance Savings Plan recommendations across an organization or payer account, identify the accounts driving eligible EC2, ECS/Fargate, and Lambda usage, analyze stable uncovered commitment fit, and summarize the findings.

Discover available payer-scoped Savings Plan recommendations or accept an optional supplied set, select and validate one primary recommendation and its hourly evidence, evaluate comparable commitment scenarios, investigate workload persistence, and produce a standalone evidence-grounded purchase recommendation and summary.

Validate payer-scoped Database Savings Plan recommendations, identify the member accounts driving eligible database usage, analyze stable uncovered commitment fit with service-specific operational evidence, and summarize the organization-level verdict.

Validate one exact AWS EC2 rightsizing recommendation per run. Deterministically preserves the Cost Explorer item and its explicitly marked default target, hands it to the owning account and Region, validates observed demand, operational compatibility, commitment coverage, and financial impact, and selects the highest-probability action without modifying resources.

Review ECS and Fargate cost efficiency across a selected organization or payer account. Collects Cost Explorer ECS and Fargate spend by account, Region, and usage type to rank the accounts driving container spend, then assesses each account against its ECS cluster, service, and task definition inventory plus CloudWatch and Container Insights CPU and memory utilization, running task counts, autoscaling policies, and runtime patterns, to judge task sizing fit, idle services, autoscaling coverage, scheduling opportunities, and Fargate versus EC2-backed launch-type economics, and summarizes an organization-level verdict with estimated monthly savings per finding.

Review network and edge cost efficiency across a selected organization or payer account. Collects Cost Explorer EC2-Other, VPC, ELB, and data-transfer spend split by usage type so NAT gateway, public IPv4, and transfer charges are separated from the EC2-Other bucket, then assesses each ranked account against its NAT gateway, Elastic IP, load balancer, and VPC endpoint inventory plus CloudWatch traffic metrics, route tables, and target registrations, to judge NAT economics against VPC endpoint alternatives, unattached Elastic IPs and public IPv4 charges, idle load balancers, endpoint fit, and cross-AZ and inter-Region transfer, and summarizes an organization-level verdict with estimated monthly savings per finding.

Validate payer-scoped SageMaker Savings Plan recommendations, identify the accounts driving eligible SageMaker usage, assess stable uncovered commitment fit, and analyze potentially unused SageMaker resources without double-counting savings.

Compatibility workflow that validates one exact scanner-prepared Cost Optimization Hub recommendation. Current analyses normally route the exact recommendation directly to its owning member account without organization rediscovery.

Configure AWS Budgets Alerts. It guides you through assessment, applying the change safely, and validating the result.

Configure AWS Cost Anomaly Detection Alert Subscriptions. It guides you through assessment, applying the change safely, and validating the result.

Configure AWS Cost Anomaly Detection Alerts. It guides you through assessment, applying the change safely, and validating the result.

Evaluate organization-wide Compute and EC2 Instance Savings Plan recommendations, isolate eligible EC2, ECS/Fargate, and Lambda usage, and return the complete ranked account set behind the opportunity.

Analyze account-level EC2, ECS/Fargate, and Lambda eligible usage, exclude poor commitment candidates, estimate Savings Plan fit, and summarize the expected opportunity and risks.

Discover and list payer-scoped Savings Plan recommendations or accept an optional supplied set, select one deterministic primary recommendation, retrieve its hourly cost, coverage, and utilization evidence, and publish typed context for downstream analysis.

Evaluate the exact provider scenario and comparable completed payer Purchase Analyzer scenarios using Savings-Plans-rate hourly units, utilization, coverage, savings, and low-utilization-hour evidence.

Attribute recommendation-relevant eligible usage across linked accounts and select the accounts whose future workload behavior could materially change interpretation of payer commitment scenarios.

Reconcile historical eligible usage to current member-account workloads and assess persistence, rightsizing, lifecycle, migration, scheduling, and concentration risks without allocating organization commitment.

Evaluate a payer-scoped Database Savings Plan recommendation, isolate eligible recurring database usage, and return the complete ranked member-account set behind the opportunity.

Analyze account-level eligible database usage, existing coverage, operational persistence, and likely capacity changes to size a safe Database Savings Plan commitment range.

Discover or verify organization rightsizing recommendations with complete pagination, assign a deterministic per-item key, preserve the exact provider default target and alternatives, select one item, and publish one owning-account validation handoff.

Validate one exact EC2 rightsizing item with focused CPU, memory, EBS, network, compatibility, and financial evaluators, distinguishing short bursts from rolling 30-minute sustained demand before publishing one highest-probability action.

Estimate 90-day and 365-day S3 lifecycle scenarios for a bounded batch of exact report-identified buckets using lightweight regional storage metrics, current pricing, and existing aggregate age evidence when available, without enumerating or modifying resources.

Quantify 90-day and 365-day ECR image expiration scenarios for a bounded batch of exact report-identified repositories without modifying images or policies.

Quantify conservative 30-day and 90-day EFS storage-class transition scenarios for a bounded batch of exact report-identified file systems without changing lifecycle settings.

Quantify 90-day and 365-day CloudWatch Logs retention scenarios for a bounded batch of exact report-identified log groups without changing retention policies.

Quantify 90-day and 365-day AWS Backup transition and expiration scenarios for a bounded batch of exact report-identified plans without changing backup configuration or recovery points.

Rank the member accounts driving ECS and Fargate spend at organization or payer scope from Cost Explorer, split by account, Region, and usage type so Fargate vCPU-hours and GB-hours are separated from ECS on EC2-backed capacity, with per-account spend share, trend against the preceding period, dominant Regions, and dominant clusters where cost allocation tags expose them, producing a bounded top-account list with an explicit cutoff.

Assess ECS and Fargate cost efficiency for an account against its own evidence: cluster, service, and task definition inventory with configured task CPU and memory, launch type and capacity provider strategy, desired counts and tags; CloudWatch and Container Insights CPU and memory utilization, running task counts, and load balancer traffic over the observation window, with a stated fallback to task counts, service events, and billing-derived runtime when Container Insights is off; Application Auto Scaling policies; and the read-only launch sources for scheduled and standalone tasks. Produces a verdict and estimated savings per service for task rightsizing, idle services, autoscaling, scheduling, and Fargate versus EC2-backed launch type.

Rank the member accounts driving network and edge spend at organization or payer scope from Cost Explorer, splitting EC2-Other, VPC, ELB, and data-transfer cost by usage type because NAT gateway hours and data processing, public IPv4 address hours, and transfer charges are billed inside the catch-all EC2-Other line and are invisible without it, with per-category and per-account spend share, trend against the preceding period, and dominant Regions, producing a bounded top-account list with an explicit cutoff.

Assess network and edge cost efficiency for an account against its own evidence: read-only inventory of NAT gateways, Elastic IPs and public IPv4 associations, load balancers and target groups, and VPC endpoints, with route tables and subnet topology; CloudWatch traffic metrics over the observation window with stated fallbacks where VPC Flow Logs are unavailable; and ownership signals from tags, attached resources, route table references, and target registrations, so a resource without ownership evidence is reported as insufficient evidence rather than as a removal. Produces a verdict and estimated savings per resource for NAT economics versus VPC endpoint alternatives, unattached Elastic IPs and public IPv4 charges, idle load balancers, endpoint fit, and cross-AZ and inter-Region transfer, with high-availability caveats stated.

Validate a supplied SageMaker Savings Plan recommendation against eligible uncovered usage and resource activity while separately identifying unused or forgotten SageMaker resources.

Review one scanner-prepared Cost Optimization Hub recommendation, fill only a decision-changing evidence gap, and publish one action-specific resource decision with supported savings.

Identify and Delete Unused AWS Security Groups. It guides you through assessment, applying the change safely, and validating the result.

Release Unattached Elastic IP Addresses. It guides you through assessment, applying the change safely, and validating the result.

Identify and Delete Unused AWS Secrets Manager Secrets After 90 Days. It guides you through assessment, applying the change safely, and validating the result.

Validate one exact scanner-prepared Azure Advisor VM-rightsizing recommendation in its owning subscription using deterministic evidence and at most one bounded exact-resource read-only fact query.

Coordinate one bounded additional investigation for an exact Azure Advisor VM-rightsizing recommendation after validating single-subscription scope, prepared-evidence provenance, and a zero-or-one-query read-only handoff.

Validate one exact scanner-prepared Azure Advisor idle or unused resource recommendation in its owning subscription using deterministic evidence and at most one bounded exact-resource read-only fact query.

Coordinate one bounded additional investigation for an exact Azure Advisor idle or unused resource recommendation after validating single-subscription scope, prepared-evidence provenance, and a zero-or-one-query read-only handoff.

Validate one exact supported scanner-prepared Azure Advisor generic cost recommendation in its owning subscription using deterministic evidence and at most one bounded exact-resource read-only fact query.

Coordinate one bounded additional investigation for an exact supported Azure Advisor generic cost recommendation after validating adapter, single-subscription scope, prepared-evidence provenance, and a zero-or-one-query read-only handoff.