Frequently asked questions

Cost Explorer figures, resource configuration metadata such as instance types, volume sizes and lifecycle policies, and CloudWatch utilisation metrics. The role has no write access at all and cannot read the data plane, so no S3 object contents, no database rows and no secrets. The full policy JSON is on the security page.

Keys are long-lived credentials and long-lived credentials leak. A cross-account role with an ExternalId gives us temporary, auditable, scoped sessions that you revoke by deleting the role. It is the pattern AWS recommends for third-party access.

Delete the FramzCostAudit CloudFormation stack, or the IAM role directly. Access ends the moment you do.

Findings are encrypted at rest and deleted 90 days after your audit closes, or 90 days after the scan if you never buy the audit. Retainer clients keep their history for as long as they subscribe.

The scan is automated. It gives you the estimated total, the counts per category, and one complete finding from your account. The audit adds a person checking every finding, the judgement calls automation cannot make such as Spot suitability, scheduling and architectural changes, exact pricing, and a written report your team can work through.

It is deliberately low. Idle resources count at 100% of their cost, a gp2 to gp3 move at 20%, rightsizing uses AWS Compute Optimizer's own figures, and anything we cannot price counts as zero. On our own scan, 66 of 105 findings came back unpriced for that reason. The guarantee is judged against the conservative total rather than a best case.

Every region with spend in your account. Coverage includes EC2, EBS, S3, RDS, DynamoDB, ElastiCache, OpenSearch, Redshift, Lambda, ECS and EKS, CloudWatch, CloudTrail, Config, EFS, ECR, SageMaker, WorkSpaces, Kinesis, Route 53, Secrets Manager, KMS and Backup.

No, AWS only. We would rather cover one platform properly than three badly.

Yes. The complete scan of our own AWS account is published on the demo page, with every finding and its evidence. It came in at 3.4%, under our own guarantee threshold, and it is on the site anyway.

£249.50 by bank transfer after the kick-off call and the same again on delivery. The free scan needs no card. VAT invoices provided.

Nothing hidden. If the report's conservative total comes in below both 20% of your monthly spend and £499 a month, the audit is free. The free scan exists to catch that before anyone spends money, and when we ran it on ourselves it did exactly that.

The audit checks re-run monthly, an alert when costs regress or new waste appears, and a review call each quarter. Set up after the audit and cancellable whenever.