·
Last changedVersion:
This version passed the hardening gate. Hardening applied 6 targeted changes and preserved all other text. Classified findings before hardening: 0. Classified findings closed: 0. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 6. Review findings remaining: 15.
None
None
Expand | File | Group | Subtype | Severity | Status |
|---|
No findings available
0 findings
This workflow analyzes Infrastructure-as-Code (IaC) files and AWS resources to generate cost optimization recommendations. It creates individual GitHub issues for each optimization opportunity plus one EPIC issue to coordinate implementation, enabling efficient tracking and execution of cost savings initiatives.
aws sts get-caller-identity succeeds)Action: Retrieve cost optimization best practices before analysis
Tools: fetch to retrieve AWS documentation
Process:
https://docs.aws.amazon.com/cost-management/latest/userguide/cost-optimization-best-practices.htmlAction: Dynamically discover and analyze AWS resources and configurations Tools: AWS CLI + Local file system access Process:
Account & Region Discovery:
aws sts get-caller-identity to confirm accountaws configure get region to determine default regionResource Discovery (per region):
aws ec2 describe-instances --query 'Reservations[].Instances[].[InstanceId,InstanceType,State.Name,Tags]'aws rds describe-db-instances --query 'DBInstances[].[DBInstanceIdentifier,DBInstanceClass,Engine,MultiAZ]'aws lambda list-functions --query 'Functions[].[FunctionName,Runtime,MemorySize,Architectures]'aws ecs list-clusters then aws ecs describe-servicesaws s3api list-buckets --query 'Buckets[].Name'aws elasticache describe-cache-clustersaws ec2 describe-nat-gatewaysaws elbv2 describe-load-balancersIaC Detection:
**/*.tf, **/*.yaml (CloudFormation/SAM), **/*.json (CloudFormation), **/cdk.json, lib/**/*.ts (CDK)Action: Gather utilization data and verify actual resource costs Tools: AWS CLI (CloudWatch, Cost Explorer) Process:
CloudWatch Metrics (last 7 days):
AWS Cost Explorer:
Calculate Baseline Metrics: CPU/Memory averages, Lambda invocation rates, data transfer patterns, and a realistic current monthly total.
Action: Analyze resources to identify optimization opportunities Process:
Apply Optimization Patterns:
Compute:
arm64 (20% cheaper)Database:
Storage:
Network:
Calculate Priority Score:
Action: Present summary and get approval before creating GitHub issues
Wait for user confirmation before proceeding.
Action: Create separate GitHub issues for each optimization. Label with "cost-optimization" (green) and "aws" (orange).
Title: [COST-OPT] [Resource Type] - [Brief Description] - $X/month savings
Body:
Action: Create master tracking issue. Label with "cost-optimization" (green), "aws" (orange), "epic" (purple).
Title: [EPIC] AWS Cost Optimization Initiative - $X/month potential savings
Body: Executive summary, prioritized checklist linking all individual issues (High → Medium → Low), progress tracking, and success criteria (>80% of estimated savings realized, no performance degradation).
Get started with chainctlchainctl skill install public/github/aws-cost-optimize:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/aws-cost-optimize:latest
MIT
HARDENING.md
LICENSE
SKILL.md