AMAZON WEB SERVICES · PILOT PROGRAM

AWS cost analysis, available in pilot.

Connect with an audited, least-privilege IAM role. AWS cost analysis is readiness-gated and run as a guided pilot when billing, inventory, and metric evidence are available.

Read AWS docs Discuss AWS readiness

AWS proof and readiness

Permissions, supported APIs, unsupported APIs, and setup path.

Readiness-gated

Permissions: Read-only IAM role with customer-controlled external ID.
Supported APIs: Cost and inventory evidence where account access, billing data, and metrics are configured.
Unsupported: Mutation APIs, account administration, write remediation, and broad parity claims.
Readiness: Ready only after billing, inventory, metric coverage, and account scope are confirmed.
Setup timeline: Confirm account scope → configure role → validate evidence → pilot audit → document limits.
Evidence Ledger: Findings must show checked evidence, unavailable evidence, freshness, confidence, owner review, and verification state.

Compare provider readiness Open Trust Center

01 · SECURE ROLE

Least-privilege role

A read-only IAM role with a customer-controlled external ID prevents confused-deputy access.

02 · ANONYMIZATION

Account-ID masking

Sensitive account numbers and identifiers can be redacted before reports are exported or shared externally.

03 · GUIDED ANALYSIS

7 savings detectors

AWS analysis is run as a guided pilot on demand. Resource and inventory checks are confirmed with our engineering team before claims are shown externally.

AWS cost note

AWS billing analysis can call Cost Explorer and related read-only APIs. Any AWS API metering, Cost Explorer usage, or billing-export costs remain in the customer's AWS account and should be reviewed before enabling the pilot.

Read-only access · No write permissions · No automated changes