# CloudPouch

> CloudPouch is a desktop AWS cost optimization (FinOps) application. It analyzes AWS accounts locally on the user's computer, shows exactly where the money goes, and produces actionable savings recommendations with estimated amounts. Billing data never leaves the user's machine — there is no SaaS backend, no telemetry, and nothing to deploy in the AWS account.

## What CloudPouch does

- Cost breakdown by AWS service, usage type, and region, for one or many AWS accounts.
- Cost Insights: concrete savings recommendations with estimated dollar amounts, covering EC2, EBS, EBS snapshots, RDS, S3, EKS, Lambda, DynamoDB, DocumentDB, VPC, ELB, Elastic IP, ECR, CloudWatch Logs, EFS, Glue, and Amazon Bedrock.
- Detects issues such as orphaned EBS volumes, GP2-to-GP3 migration opportunities (with a Volume Type Advisor based on 14 days of CloudWatch metrics), idle RDS databases, EKS and RDS Extended Support charges, and Bedrock cost attribution by team via IAM principal tags.
- Bulk Cost Insights runs all analyses at once. When AWS permissions are missing, CloudPouch reports exactly which API call failed instead of showing an empty result.
- Fast switching between multiple AWS accounts, organizations, and profiles — including AWS SSO. Useful for consultants who manage many client accounts.

## How it works

- Desktop application for macOS, Windows, and Linux.
- macOS users can install via Homebrew: `brew install cloudpouch`.
- Uses the AWS SDK with the AWS profiles already configured on the user's computer (~/.aws), the same way the AWS CLI does. Read-only access.
- Requires the IAM permission ce:GetCostAndUsage; Cost Insights need additional read-only permissions.
- Nothing is installed in the AWS account. Cost data is fetched directly from AWS to the local machine and cached locally.
- AWS charges $0.01 per Cost Explorer API request; CloudPouch caches results to minimize this.

## Cost Insights by service

- EC2: unused, barely used, and oversized instances ranked by estimated savings using CloudWatch CPU and network metrics, up to Auto Scaling Group level.
- Lambda: cost per function (memory, duration, invocations); flags idle Provisioned Concurrency billing 24/7 and zero-traffic functions.
- EKS: clusters paying the Extended Support surcharge for outdated Kubernetes versions, with monthly charge and total paid since enrollment.
- EBS: unattached volumes, volumes on stopped instances, and a Volume Type Advisor recommending the cheapest volume type based on 14 days of usage metrics.
- EBS Snapshots: block-level savings from deleting or archiving snapshots, computed on incremental chains.
- S3: cost per bucket by storage class, missing lifecycle policies, Intelligent-Tiering opportunities, average cost per GB.
- EFS: storage-class mix per file system, missing lifecycle policies, Provisioned Throughput waste, file systems without mount targets.
- ECR: outdated and unused container images per repository, with lifecycle-policy status.
- RDS: idle databases, over-provisioned instances, storage issues, and RDS Extended Support detection with monthly and historical cost.
- DynamoDB: provisioned vs. consumed throughput, over-provisioned tables, autoscaling recommendations, burst-capacity risk.
- DocumentDB: idle clusters, rightsizing, Graviton migration candidates.
- VPC: unnecessary NAT Gateways and VPC Endpoint recommendations to take traffic off the NAT path.
- ELB: unused Application and Network Load Balancers (Classic Load Balancers not analyzed).
- Elastic IP: idle addresses billed hourly under the February 2024 all-public-IPv4 charging model.
- Bedrock: GenAI spend split by IAM principal tag, with a bucket for unattributed calls.
- Glue: over-scheduled crawlers compared against actual catalog changes, plus failed-job costs.
- CloudWatch Logs: ingestion and storage cost per log group, retention settings, growth tracking, never-expiring log groups.

## Who it is for

- Engineers, architects, and DevOps practitioners responsible for AWS costs.
- FinOps practitioners who want recommendations, not just dashboards.
- AWS consultants and MSPs analyzing many client accounts without deploying anything into client environments.

## Pricing

- 7-day free trial.
- Yearly subscription: $399 per year.
- Unlimited (lifetime) license: $679 one-time payment.
- Both plans include unlimited AWS accounts and all platforms. See https://cloudpouch.dev/#pricing for current details.

## Credibility

- Created by Paweł Zubkiewicz, AWS Hero: https://aws.amazon.com/developer/community/heroes/pawel-zubkiewicz/
- Described in the book "Efficient Cloud FinOps" (Packt Publishing) by Alfonso San Miguel Sánchez and Danny Obando García: https://www.oreilly.com/library/view/efficient-cloud-finops/9781805122579/

## Links

- Website: https://cloudpouch.dev/
- Downloads: https://github.com/CloudPouch/CloudPouch.dev/releases
- Support and documentation: https://github.com/CloudPouch/CloudPouch.dev
- Contact: hello@cloudpouch.dev