Read-only AWS review

AWS Savings Review

Create one read-only IAM role and receive a browser-ready report with top savings opportunities, supporting evidence, and a technical appendix.

See setup steps Connect AWS account

Backend URL is not configured yet. Set window.FINOPS_API_BASE_URL in config.js before launching a scan.

What you get

Concrete output, not a long onboarding project.

Recent AWS spend context based on current billing data
Priority actions ranked by estimated impact
Supporting evidence you can review with engineering or finance

Deliverables

Ready to share with your team.

Browser-ready dashboard
Technical appendix with validation and evidence
Saved report artifacts for future reruns

How It Works

Enable billing prerequisites

Turn on Cost Explorer and Cost Optimization Hub in AWS Billing and Cost Management.

Create the read-only role

Trust the hosted scanner principal shown below and require a customer-specific external ID.

Paste role details

Paste the role ARN and external ID into the form so the scan can run on Fargate.

Review the report

Open the dashboard in-browser, then use the appendix for supporting evidence.

Step-By-Step Setup

Create a read-only AWS role

Create this role once, then paste the role ARN and external ID to run your AWS Savings Review.

Enable Cost Explorer

In AWS Billing and Cost Management, turn on Cost Explorer for spend baselines.

Enable Cost Optimization Hub

Turn on Cost Optimization Hub so AWS-native recommendations can populate.

Create a new IAM role

Name it something like aws-savings-review-readonly. Use the trust policy below, then attach the read-only permissions policy.

Trust Policy

Paste this into the role trust policy

Trusted scanner principal Loading…

Hosted scans run from the ECS Fargate task role, not from your local IAM user. If a role only trusts your local user, localhost can work while the public site fails.

Suggested external ID aws-savings-review-customer

Permissions Policy

Attach this read-only permissions policy

Access mode Read-only

This grants read-only access to billing, inventory, and optimization signals without making changes in your account.

Assessment intake

Connect your AWS environment

Tell us whether this is one AWS account or an AWS Organization, then paste the read-only role details to start the review.

Company name Your name

Work email

Is this one AWS account or an AWS Organization? One AWS account Use a read-only role in the account you want reviewed. AWS Organization Use a management-account role when organization discovery is allowed.

Role ARN External ID Regions, comma separated Notes I enabled Cost Explorer in AWS Billing and Cost Management. I enabled Cost Optimization Hub in AWS Billing and Cost Management. Include Cost Explorer resource-level daily costs when available. Use rate-limit safe mode.

Back to setup