New Savings Proposals: approve, test and roll back cost changesLearn more Sign in|Talk to a cloud engineer
Product tourGet a demo

Guides for cloud cost and security

Practical guides for FinOps and cloud security teams. Each one links to the part of CloudLens that does the work it describes.

Try the interactive demo
Guide · FinOps

From bill to fix: a FinOps playbook

How to turn a raw cost and usage report into a short list of priced fixes with owners, and how to check the savings actually showed up on the bill.

  • Allocation first
  • Rank by effort
  • Addressed ≠ realized
Explore Recommendations
Guide · EOL

The EOL calendar: fees you can see coming

Engine and runtime end-of-life dates turn into extended-support surcharges. Here's how to plan upgrades before the bill changes.

  • RDS & EKS extended support
  • Lambda runtimes
  • Epic per upgrade
Explore EOL & Deprecation
Guide · Commitments

Savings Plans or Reserved Instances?

How to read coverage and utilization, plan for expiry dates, and commit only to usage a Savings Plan or Reserved Instance can actually cover.

  • Coverable usage only
  • Expiry timeline
  • Payment options
Explore Commitments
Guide · Security

Cloud security basics: exposure, identity, data

Three questions every finding should answer: can it be reached, what is it allowed to do, and what data sits behind it.

  • Reachability
  • Least privilege
  • Where sensitive data lives
Explore Security Graph
Guide · Security

Toxic combinations, explained

Why an open port and an admin role are each medium severity on their own but critical on the same machine, and how to rank findings by what an attacker can reach.

  • Two facts at once
  • Attack paths
  • Triage that sticks
Explore Toxic Combinations
Guide · FinOps

Allocating shared spend to teams and products

Grouping vs allocation dimensions, first-match-wins rules, and previewing dollars per rule before you publish.

  • Grouping vs allocation
  • Rule preview
  • Version history
Explore Dimension Studio
Guide · FinOps

Turning off non-prod when nobody's looking

Office-hours schedules for EC2 and RDS, with dry runs and approvals so nothing stops that someone still needs.

  • Dry run first
  • Approval workflow
  • Projected savings
Explore Scheduler
Rather see it on your own bill?

Walk through your account with an engineer

Get a demo

Rather click than read?

The interactive Cost Explorer runs on 90 days of sample spend. Group, filter, compare and drill in without signing up.

Open the demo

Ready to see CloudLens in action?

Connect a read-only AWS role or Azure service principal. We'll walk you through your bill, your security graph and the first things worth fixing.