Blog
Guides, walkthroughs and AWS how-tos for asking your cloud questions in plain English.
-
Find Idle EC2 Dedicated Hosts
A TypeScript script that measures EC2 Dedicated Host utilization, prices every host with the Price List API and releases only empty hosts you name.
-
Tag S3 Objects With AWS SDK v3 (PutObjectTagging)
Tag S3 objects from Node.js: tags on upload, safe merges with PutObjectTagging, version tags, bulk tagging with concurrency, IAM conditions and cost.
-
CloudFront Invalidation With AWS SDK v3 (CreateInvalidation)
Invalidate CloudFront paths from Node.js with CreateInvalidationCommand, wait for completion, retry safely and keep invalidation costs near zero.
-
Measure S3 Storage Used by Noncurrent Object Versions
A TypeScript script that adds up noncurrent object versions and delete markers in every versioned S3 bucket and prices the hidden storage.
-
Find Unused EC2 Capacity Reservations
A TypeScript script that finds On-Demand Capacity Reservations with empty slots, prices the waste and cancels only the ones you name.
-
Find Lambda Functions With a Timeout Too High for Their Runtime
An AWS SDK v3 script that compares every Lambda timeout with real p99 and maximum Duration, flags timeouts far above runtime and functions hitting…
-
Find CloudFormation Stacks Without Termination Protection
An AWS SDK v3 script that finds root CloudFormation stacks without termination protection, ranks them by risk, and turns it on for the ones…
-
Check AWS Backup Vaults for Vault Lock and Access Policies
An AWS SDK v3 script that reports Vault Lock mode, grace time, retention limits and deny policies for every AWS Backup vault, without locking…
-
Find Expired and Unused IAM Server Certificates
An AWS SDK v3 script that lists IAM server certificates, checks load balancers and CloudFront for references, and deletes only expired, unused ones.
-
Audit IAM SAML and OIDC Identity Providers
An AWS SDK v3 script that lists every IAM SAML and OIDC provider, the roles that trust it, and the trust policies anyone outside…