Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
Cost & Resource Hygiene Best Practices
25 controls
19 services covered
Checks spend controls and stale-resource cleanup — Budgets and Cost Explorer anomaly detection, lifecycle and retention policies, previous-generation instances, unattached or idle assets, certificate and domain expiry, and Elastic IP capacity hygiene.
What we check
Route 53 Domains3
- Route 53 domains auto renew should be enabled
- Route 53 domains should not expire within next 30 days
- Route 53 domains should not be expired
AWS Budgets2
- AWS Cost Budget Defined
- AWS Budget Notifications Defined
Cost Anomaly Detection2
- AWS Cost Anomaly Detection is Enabled
- Cost Anomaly Detection has a Subscription Defined
EBS Volumes2
- Attached EBS Volume Delete on Termination Enabled
- EBS gp2 Volume In Use (Instead of gp3)
S3 Lifecycle Policies2
- S3 Bucket Lifecycle Rules are Configured
- S3 Version Lifecycle Policy Check
Organizations Tag Policies1
- AWS Organizations Tag Policies Enabled
Backup Plans1
- Backup Plans Include Lifecycle Policies
CloudWatch Alarms1
- CloudWatch Log Groups Retention Policy Configured
EC2 Instances1
- EC2 Previous Generation Instance Types Are Not Used
EC2 AMIs1
- Ensure Images (AMI) are not older than 90 days
EC2 Network Interfaces1
- Ensure unused ENIs are removed
ECR Repositories1
- ECR Lifecycle Policies Enabled
EFS File Systems1
- EFS Lifecycle Policies are Configured
IAM Identities1
- IAM Policies Unused (Unattached) Should Be Removed
WAF Resource Associations1
- WAF Classic Web ACL Associated to a Resource
VPC Subnets1
- VPC Subnets have Available IP Space (25% Free)
DMS Certificates1
- Ensure that all the expired DMS certificates are removed
RDS Certificates1
- RDS DB instances CA certificates should not expire within next 7 days
Data Lifecycle Manager Policies1
- DLM EBS snapshot lifecycle policy should be enabled
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.