// PRODUCT · SUBSCRIPTION · ADVISORY-ONLY //

AWS COST
GUARDIAN

A subscription service that keeps a senior engineer's eye on your AWS bill. Automated pipelines collect and analyze your cost data every week; an engineer reviews the findings and tells you what actually matters. Advisory-only by design: we recommend, your team stays in control of every change.

weekly-digest.txt
$ cost-guardian report --week 2026-W30 ✓ total spend $8,214 (forecast $8,350) ! anomaly NAT gateway data processing +212% w/w ✓ top mover EC2 down 9% after rightsizing ✓ new finding 3 unattached EBS volumes, est. $84/mo full findings in this month's reviewed report...
ACCESSRead-only, cross-account IAM role CADENCEWeekly digest · Monthly review · Quarterly call DATACost Explorer and Cost and Usage Report PRICINGScoped per engagement
// HOW IT WORKS //

COLLECT. ANALYZE. REVIEW.

01 · COLLECT

Automated pipelines pull your cost data every week through a minimal, read-only IAM role. Every number comes from deterministic queries against Cost Explorer and your Cost and Usage Report, never from guesswork.

02 · ANALYZE

Spend by service, trends, forecast versus actual, and anomaly detection. When something in the bill misbehaves, you get an alert by email, not a surprise at month end.

03 · REVIEW

A senior engineer reads the findings every month and tells you what actually matters: what we caught, what to fix first, and new savings opportunities. Quarterly calls plan the bigger optimizations.

// WHAT YOU GET //

THE DELIVERABLES

  • Weekly automated digest: spend by service, trends, and anomalies
  • Anomaly alerts by email when something in the bill misbehaves
  • Monthly engineer-reviewed findings: what we caught, forecast versus actual, and new savings opportunities
  • Quarterly review calls to plan the bigger optimizations
  • Onboarding via a minimal, read-only, cross-account IAM role: we never get write access to your environment
Cost ExplorerCURPythonRead-only IAMEmail & Slack alerts
// SECURITY MODEL //

WE NEVER GET WRITE ACCESS

Onboarding is one cross-account IAM role with read-only permissions scoped to billing and cost data. You can review the policy before it is created, and revoke it at any time. Recommendations arrive as reports; every change is made by your team, on your schedule.

"Action": [ "ce:Get*", "ce:Describe*", "cur:DescribeReportDefinitions" ], "Effect": "Allow"

WHAT IS YOUR BILL DOING?

Tell us how many accounts you run and roughly what you spend. We will scope the engagement and send a quote.

REQUEST A QUOTE