CloudWatch waste check
Empty Log Group
empty_log_group
What it finds
Empty Log Group: one of the CloudWatch checks in the management & operations group. Checks in this group look for: logging, tracing and management resources that keep data longer than needed, hold nothing, or are no longer used.
Why it costs money
Log ingestion and retention, trails, keys and dashboards each carry a recurring charge that keeps running after anyone looks at them.
How it is detected
Log group with zero log streams
Detection confidence: HIGH. This is the criterion from our public docs. It runs in a local scan with your own read-only credentials.
AWS's own tools
None of Trusted Advisor, Cost Optimization Hub or Compute Optimizer flags this.
Checked against the AWS documentation.
Run it yourself
Nothing leaves your machine. The local scan has no telemetry.