AWS Cost Optimization Toolkit - Getting Started

Recommended workflow for using the read-only assessment report and optional remediation modules.

Back to Catalog Download Report Generator YAML Download Runbook

Operating Model

The cost optimization report is read-only. Remediation modules are separate, opt-in CloudFormation tools with conservative defaults. Run review-only or dry-run mode first. Apply changes only after account, application, or resource owner review.

Standard Workflow

  1. Deploy the read-only Cost Optimization Report Generator.
  2. Review the generated HTML, JSON, and CSV findings with the account or application owner.
  3. Use the catalog to choose the remediation module matching a finding category.
  4. Download the module CloudFormation YAML.
  5. Deploy the module in the target account.
  6. Run review-only or dry-run mode first.
  7. Review candidates, exclusions, approval tags, and safety gates.
  8. Apply only after owner approval.
  9. Re-run the assessment report to confirm the finding changed or was resolved.

Deploy the Report Generator

aws cloudformation deploy \
  --stack-name cost-optimization-report-generator \
  --template-file Cost-Optimization-Report-Template-V1.yaml \
  --capabilities CAPABILITY_NAMED_IAM

Use the stack outputs to locate the generated HTML, JSON, and CSV reports.

Deploy a Remediation Module

aws cloudformation deploy \
  --stack-name <module-stack-name> \
  --template-file <module-yaml-file> \
  --capabilities CAPABILITY_NAMED_IAM

Each module section in the runbook includes the recommended run, validation, and interpretation commands.

Security-Owned / Advisory Services

Security services and centrally managed logging should remain visible in the report but are generally advisory-only unless the owning security or cloud governance team approves changes.