Cost waste
Unattached volumes, unused Elastic IPs, orphaned load balancers, stale snapshots, stopped instances still costing you storage.
Unattached volumes, unused Elastic IPs, orphaned load balancers, stale snapshots, stopped instances still costing you storage.
Open security groups, public S3 buckets, missing MFA, unencrypted storage/databases, stale IAM access keys, weak CloudTrail coverage.
The scan role can only read configuration — it cannot modify, delete, or access data in any resource.
Yes. The scan role is strictly read-only — it can only call Describe/List/Get API actions. It cannot change, delete, or create anything.
The IAM role can be deleted immediately after your report is generated — access is entirely temporary and under your control the whole time.
No. Findings are used only to generate your report and are not retained beyond that.
Cost Explorer shows spend trends but doesn't proactively flag waste. AWS Trusted Advisor's full cost and security check suite — the checks that actually catch idle resources, unattached volumes, and orphaned load balancers — requires a Business Support plan starting at $29/month minimum, and AWS stopped accepting new Business Support signups in December 2025 ahead of retiring it in 2027. Even where the data is technically free, it's scattered across four or five different consoles in raw technical form, with no dollar estimates or prioritization. This report translates all of it into one prioritized, plain-English document with estimated monthly savings — no new AWS bill, no consoles to learn, done in one email.
See also: Home · All products · [email protected]