CloudWatch waste check

Old Log Group

old_log_group

Low riskAir-Gapped and onlineValidation L1Open

What it finds

Old Log Group: one of the CloudWatch checks in the management & operations group. Checks in this group look for: logging, tracing and management resources that keep data longer than needed, hold nothing, or are no longer used.

Why it costs money

Log ingestion and retention, trails, keys and dashboards each carry a recurring charge that keeps running after anyone looks at them.

How it is detected

Log group with no recent logs

Detection confidence: MEDIUM. This is the criterion from our public docs. It runs in a local scan with your own read-only credentials.

Run it yourself

Nothing leaves your machine. The local scan has no telemetry.