Scope (what is in)
- Idle and leftover: unattached EBS, old snapshots, Elastic IPs, NAT Gateways, stopped instances, idle load balancers.
- Rightsizing candidates for EC2 and RDS (CloudWatch, 14-day window), with the limits of that signal (no memory without the agent).
- Storage: gp2→gp3, S3 lifecycle / Intelligent-Tiering / incomplete multipart uploads.
- A Savings Plans / RI recommendation that covers only a conservative floor — or an explicit “do not buy yet” if usage is not stable.
- One account, the regions you name (default: all opted-in regions). Extra accounts are a separate fee, quoted first.
What is out
We do not apply changes, we do not take a call, we do not keep the role after delivery, and we do not promise a dollar figure before seeing the account. Figures in the report are estimates, labelled as such. Kubernetes deep-dives, SaaS commitment negotiations, and Reserved Instance purchases are out of scope.
Access, on purpose narrow
Preferred: an IAM role with ReadOnlyAccess + billing/Cost Explorer read, assumable only from our account, External ID, session ≤ 4 hours, optional MFA. We give you a CloudFormation template. Alternative: a Cost Explorer CSV / CUR export if you cannot grant a role. We never ask for root, and we never ask you to paste access keys into email or chat.
Refund
Full refund if you cancel before we receive access (the role ARN or the export). After work starts, the fee is not refundable, except if we fail to deliver the written report within 5 business days of valid access — then you get a full refund.
Auditoría de costos AWS · I-03 · USD 149
Una auditoría escrita, precio fijo, sin llamada y sin acceso permanente.
Otorgás un rol IAM de solo lectura y con tiempo limitado (CloudFormation que te pasamos, External ID obligatorio), o enviás una exportación de Cost Explorer / CUR. A los 5 días hábiles de un acceso válido recibís un informe escrito: desperdicio mensual estimado, evidencia y una lista priorizada de acciones. Nosotros no cambiamos nada en tu cuenta.
Alcance
Recursos ociosos (EBS sueltos, snapshots viejos, EIPs, NAT, instancias detenidas, balanceadores sin tráfico), candidatos a rightsizing de EC2 y RDS, almacenamiento (gp2→gp3, lifecycle de S3) y una recomendación conservadora de Savings Plans — o un “todavía no compres” si el uso no es estable. Una cuenta, las regiones que indiques. Cuentas extra se cotizan antes.
Reembolso
Reembolso completo si cancelás antes de que recibamos el acceso. Después de iniciado el trabajo, el fee no se reembolsa, salvo que no entreguemos el informe en 5 días hábiles desde un acceso válido: en ese caso, reembolso completo.