Skip to content

v0.6.0

Choose a tag to compare

View all tags
@vuhp vuhp released this 02 Feb 06:00
· 64 commits to main since this release
v0.6.0
a417f06

🎉 What's New

11 New Analyzers Across AWS and Azure!

We've more than doubled the number of analyzers from 10 to 21 total analyzers across AWS, Azure, and GCP. This release adds deep visibility into serverless, databases, networking, and container services.

AWS (7 new analyzers):

1. Lambda Functions

  • Detects unused functions (zero invocations)
  • Identifies over-provisioned memory
  • Flags high error rates
  • Estimates savings from rightsizing

2. NAT Gateways

  • Finds unused NAT Gateways ($32/month each!)
  • Detects underutilized gateways (low data transfer)
  • Suggests VPC endpoint alternatives

3. DynamoDB Tables

  • Wrong billing mode (provisioned vs. on-demand)
  • Over-provisioned read/write capacity
  • Unused tables (no reads/writes)
  • Savings from switching modes

4. CloudWatch Logs

  • Log groups with excessive retention (years of logs!)
  • Large, rarely queried log groups
  • Suggests retention policy optimization
  • Estimates storage cost savings

5. Snapshots (EBS & RDS)

  • Old snapshots (> 90 days)
  • Orphaned snapshots (original resource deleted)
  • Snapshot costs add up fast

6. ElastiCache (Redis & Memcached)

  • Underutilized clusters (low CPU, low connections)
  • Oversized node types
  • Idle test/dev clusters

7. ECS/Fargate

  • Empty ECS clusters (no services)
  • Inactive Fargate services (0 tasks running)
  • Cluster sprawl detection

Azure (3 new analyzers):

8. App Service Plans

  • Empty App Service Plans (no apps!)
  • Oversized plans (1 small app on Premium plan)
  • Excess capacity (many open slots)

9. Azure Functions

  • Premium plans for light workloads (Consumption plan better)
  • Stopped function apps still incurring costs
  • Rightsizing recommendations

10. CosmosDB

  • Over-provisioned Request Units (RU/s)
  • Serverless candidates (spiky traffic patterns)
  • Idle databases

🛡️ Improved Error Handling

Graceful Permission Degradation

Previously, missing one IAM permission would crash the entire scan. Now:

Before:

Error: AccessDeniedException: User is not authorized to perform: lambda:ListFunctions
[scan stops entirely]

After:

✓ Analyzing EC2 instances...
✓ Analyzing EBS volumes...
⚠️  Skipping Lambda functions - missing IAM permission: lambda:ListFunctions
   Continuing with other analyzers...
✓ Analyzing RDS instances...
...
Found 12 opportunities (estimated $450/month savings)

Permission Detection

  • Detects AWS, Azure, and GCP permission errors
  • Shows specific missing permissions
  • Provides actionable guidance
  • Continues scan with available analyzers

Full Changelog: v0.5.0...v0.6.0

Assets 2
Loading