# CloudPouch: See, understand, and reduce AWS costs

CloudPouch is a local-first desktop AWS cost optimization and FinOps application.
It shows where AWS spending goes and produces actionable savings recommendations
with estimated amounts. It runs on macOS, Windows, and Linux.

CloudPouch is designed for engineers, architects, DevOps and FinOps
practitioners, and AWS consultants who need useful cost analysis without moving
their billing data into another hosted platform.

## Why CloudPouch

- **Local-first privacy:** AWS credentials, billing data, and cached cost data
  remain on the user's computer. CloudPouch servers do not participate in AWS
  API requests.
- **Nothing to deploy:** CloudPouch uses existing local AWS profiles or AWS SSO
  sessions. It does not install resources or persistent integrations in an AWS
  account.
- **Unlimited AWS accounts:** One license can analyze any number of AWS profiles,
  accounts, and organizations, regardless of AWS bill size.
- **Actionable recommendations:** Cost Insights explain what to fix, why it
  costs money, and the estimated saving—not only what was spent.
- **Read-only operation:** CloudPouch analyzes billing and resource metadata. It
  does not modify AWS resources.

## Cost analysis

CloudPouch breaks down AWS costs by service, usage type, region, account, and
time period. It supports fast switching between multiple AWS profiles and AWS
SSO sessions, which is useful for consultants and teams working across many
accounts.

Bulk Cost Insights runs all available analyses together. If an AWS permission
is missing, CloudPouch identifies the failed API call rather than presenting an
empty result as if there were no savings opportunities.

## Cost Insights

CloudPouch analyzes 17 AWS service areas, including:

- **EC2:** unused, barely used, and oversized instances ranked by estimated
  savings using CPU and network metrics.
- **EBS:** unattached volumes, volumes on stopped instances, GP2-to-GP3
  opportunities, and a Volume Type Advisor based on 14 days of usage metrics.
- **EBS snapshots:** deletion and archive opportunities calculated using
  incremental snapshot chains.
- **RDS and DocumentDB:** idle or oversized databases, storage issues, Graviton
  migration candidates, and RDS Extended Support costs.
- **S3 and EFS:** storage-class mix, lifecycle-policy gaps, Intelligent-Tiering
  opportunities, throughput waste, and unused file systems.
- **Lambda:** function-level memory, duration, invocation, and Provisioned
  Concurrency costs, including idle functions.
- **EKS:** clusters paying Extended Support charges for outdated Kubernetes
  versions.
- **DynamoDB:** provisioned-versus-consumed capacity, over-provisioning,
  autoscaling opportunities, and burst-capacity risk.
- **Networking:** unused load balancers, unnecessary NAT Gateways, VPC Endpoint
  opportunities, and idle Elastic IP addresses.
- **ECR:** outdated or unused container images and lifecycle-policy coverage.
- **CloudWatch Logs:** ingestion and storage cost, retention settings, growth,
  and log groups that never expire.
- **Glue:** over-scheduled crawlers and failed-job costs.
- **Amazon Bedrock:** generative-AI cost attribution by IAM principal tag.

## Installation and getting started

macOS users can install CloudPouch with Homebrew:

```shell
brew install cloudpouch
```

Installers for macOS, Windows, and Linux are available from the
[CloudPouch releases page](https://github.com/CloudPouch/CloudPouch.dev/releases).
A seven-day free trial is available.

CloudPouch reads AWS configuration already present on the computer, similarly
to the AWS CLI. The baseline IAM permission is `ce:GetCostAndUsage`. Individual
Cost Insights require additional read-only permissions listed in the
[AWS permissions reference](https://docs.cloudpouch.dev/reference/aws-permissions/).

AWS currently charges for Cost Explorer API requests. CloudPouch caches fetched
data locally to reduce repeated requests. Consult AWS pricing for the current
API charge.

## Pricing

CloudPouch offers fixed per-license pricing rather than pricing based on AWS
spend. Current plans shown on the website are:

- Monthly subscription: **$39 per month**.
- Yearly subscription: **$399 per year**.
- Unlimited license: **$679 one-time payment**.
- Enterprise plan: **$639 per month for 100 users**.

All self-service plans support macOS, Windows, and Linux and include unlimited
AWS accounts. Taxes may be added depending on location. See the
[pricing section](https://cloudpouch.dev/#pricing) for current purchase details.

## Security and data handling

CloudPouch takes AWS credentials from locally configured profiles and AWS SSO,
then calls AWS directly from the desktop. AWS credentials and identifiable AWS
billing or resource data are not stored on CloudPouch servers. Fetched cost data
is cached only on the user's computer.

Because CloudPouch is not a hosted FinOps platform, stopping use does not require
removing vendor infrastructure, disconnecting a persistent AWS integration, or
exporting a vendor-hosted billing dataset.

## Frequently asked questions

### Does CloudPouch change AWS resources?

No. CloudPouch uses read-only access and does not modify resources.

### Does anything need to be installed in AWS?

No. Install CloudPouch on a computer and select an existing AWS profile or AWS
SSO session.

### Where is AWS billing data stored?

On the user's computer. CloudPouch caches fetched data locally to reduce Cost
Explorer requests; identifiable billing data is not stored by CloudPouch.

### Which operating systems are supported?

macOS, Windows, and Linux.

### Where is the documentation?

The [CloudPouch documentation](https://docs.cloudpouch.dev/) covers installation,
getting started, Cost Insights, AWS permissions, and troubleshooting.

## Links

- [CloudPouch website](https://cloudpouch.dev/)
- [Documentation](https://docs.cloudpouch.dev/)
- [Downloads and releases](https://github.com/CloudPouch/CloudPouch.dev/releases)
- [GitHub issues and feature requests](https://github.com/CloudPouch/CloudPouch.dev/issues)
- Contact: [hello@cloudpouch.dev](mailto:hello@cloudpouch.dev)