Blog
Guides, walkthroughs and AWS how-tos for asking your cloud questions in plain English.
-
Delete Old ECR Images With a Lifecycle Policy
A TypeScript AWS SDK v3 script that finds ECR repositories with no lifecycle policy, estimates what old images cost, and sets a policy only…
-
AWS SDK v3 Credentials Provider: fromIni, fromSSO and Assume Role
How AWS SDK for JavaScript v3 finds credentials, and when to pick fromIni, fromSSO, fromTemporaryCredentials or fromNodeProviderChain yourself.
-
Get a Secrets Manager Secret Value With AWS SDK v3
GetSecretValueCommand end to end: string and binary secrets, typed JSON parsing, an in-memory TTL cache, the Lambda extension, permissions and errors.
-
Find Unused IAM Roles With RoleLastUsed
A report-only TypeScript script that lists IAM roles unused for 90 days, with last-used date, Region and who the role trusts.
-
Find Public EBS and RDS Snapshots
A TypeScript script that finds EBS, RDS and Aurora snapshots shared with every AWS account and removes public access only with –apply.
-
Find Unencrypted EBS Volumes and Turn On Default Encryption
A TypeScript script that lists unencrypted EBS volumes per Region and turns on EBS encryption by default only when you pass –apply.
-
Find Idle RDS Instances With No Connections
A read-only AWS SDK v3 script that flags RDS DB instances with zero client connections in the last 14 days and estimates what they…
-
Find Unused Customer Managed KMS Keys
A read-only AWS SDK v3 script that reports customer managed KMS keys with no recent cryptographic use, using GetKeyLastUsage and CloudTrail.
-
Find EC2 Instances Stopped for Weeks and Still Costing You
A read-only AWS SDK v3 script that lists EC2 instances stopped for weeks, with the EBS and Elastic IP charges each one still runs…
-
Find Unused Security Groups in Your AWS Account
A TypeScript AWS SDK v3 script that lists security groups no network interface or rule uses, and deletes them only when you pass –apply.
