AWSCost

AWSCost scans an AWS account read-only and reports what it is wasting, in dollars per month.

The user deploys a single CloudFormation role granting Get, Describe and List permissions only. The scanner reads every enabled region and returns results in about five minutes, without requiring AWS Compute Optimizer to be switched on or a paid AWS Support plan.

It runs 33 checks. Eighteen overlap with what AWS's own tools report. The other fifteen have no equivalent anywhere in AWS tooling, among them interface VPC endpoints nothing calls, Transit Gateway attachments carrying no traffic, Site-to-Site VPN connections with both tunnels down, EKS clusters with no nodes, container images nobody pulls, snapshots of volumes that no longer exist, and manual RDS snapshots that never expire.

Each finding is priced per month and states what the fix costs, including the cases where the saving is not worth taking. Nothing in the account is ever changed or deleted.

The price of a report is set by the size of the bill it measured.