Latest
Just moved to AWS? What to check in your first month
A lift-and-shift copies on-premises habits into a bill that charges by the hour. Seven things to check in the first 30 days after a migration.
7 min read
Engineering blog
Real data, no fluff.
Technical deep-dives on AWS cost optimization, cloud waste detection, and FinOps automation. Also as a podcast
Find the Waste Before You Lock the 2027 AWS Budget
Many AWS budgets start from this year's run rate, waste included. Split the bill into three buckets (cut before January, check first, keep) before 2027.
AWSFinOpsCost Optimization5 min read
Before You Delete What the Scanner Found: The Check Each Kind of Waste Needs First
A waste finding is a lead, not a delete order. For six common AWS findings, the one check to run before you remove anything, and the order to do it in.
AWSFinOpsCost Optimization6 min read
How a dev agency checks its clients' AWS bills without asking for the keys to the account
Techlio, a Dallas and Lahore dev agency, runs the free cloudcostwise CLI on its own machine against client AWS accounts, read-only. What it took to get a yes.
AWSConsultingFinOps3 min read
A Client Cost Review With the Credentials You Already Have
Already have read access to a client's AWS account? Run a free, source-available CLI against it: what it reads, what it refuses to do, what to hand the client.
AWSConsultingFinOps6 min read
Read-Only by Construction: The Guard in Front of Every AWS Call
Most tools say they're read-only because their docs or IAM role say so. A small guard makes it a code property: non-read AWS calls are refused before sending.
AWSSecurityPython6 min read
Why Read-Only Is the Only Safe Way to Let AI Near Your AWS Account
CloudWise onboarding only grants a Get/Describe/List-only IAM role. Remediation is a separate, opt-in stack behind an approval gate. Here is the real IAM.
SecurityTrustIAM6 min read
EBS Snapshot Sprawl: The Waste Cost Explorer Can't Show You
EBS snapshot costs are real, but Cost Explorer can't show which AMI or volume causes them. The blind spot, the AMI-pinning trap, and what our detector checks.
AWSEBSFinOps5 min read
NAT Gateway: The Bill Nobody Reads
NAT Gateway costs hide in 'Amazon Virtual Private Cloud' among a dozen other charges. What our detector checks before saying delete, and what it misses.
AWSNAT GatewayFinOps4 min read