# unusd.cloud

> Read-only AWS scans across 30+ services and every region. Weekly digest by email. Full report in the app. Waste followed per resource over time. 51+ detections. 5-minute setup.

Navi (AI grounded in scan findings) is on Business. Telegram Channels carry the Enterprise executive digest. Startup+ can register, configure, and trigger scans through a public API.

Made by ZOPH.IO (SIREN 880 003 322), a French SASU. Product data stays in AWS eu-west-1. People with access to production are in the EU. DPA on request at security@unusd.cloud. Navi is off until enabled; only then does a findings snippet go to OpenAI. Consulting under the zoph.io brand is a separate practice of the same company. unusd.cloud is the product. Paid plans are on AWS Marketplace. Consulting clients are not listed here.

## Key pages

- [Home](https://unusd.cloud/)
- [About](https://unusd.cloud/about)
- [Community](https://unusd.cloud/community)
- [Security / DPA](https://unusd.cloud/security)
- [For consultancies](https://unusd.cloud/for-aws-consultancies)
- [Blog](https://unusd.cloud/blog)
- [FAQ](https://unusd.cloud/#faq)
- [Sign in](https://app.unusd.cloud/auth/signin)
- [Start free scan](https://app.unusd.cloud/auth/signup)
- [AWS Marketplace listing](https://aws.amazon.com/marketplace/pp/prodview-tbt4lnvfo6ycy)

## Machine-readable bundles

- [Full site + blog plain text](https://unusd.cloud/llms-full.txt) (generated at build)
- [RSS](https://unusd.cloud/rss.xml)
- [Sitemap](https://unusd.cloud/sitemap.xml)

## Blog articles

- [You cannot optimize AI spend you cannot see](https://unusd.cloud/blog/you-cannot-optimize-ai-spend-you-cannot-see): Bedrock bills grew faster than the tools that explain them. The account report and the executive digest now show which model and which token type took the dollars.
- [The scan forgot the volume we deleted](https://unusd.cloud/blog/finding-ledger-when-unused-aws-resources-clear): A new scan only shows what is idle now. The finding ledger keeps each resource until a later complete scan says it cleared.
- [The account form dies around account 40](https://unusd.cloud/blog/public-api-to-register-aws-accounts): Startup and above can register, configure, and trigger read-only AWS scans from the public API. The IAM role still has to exist in each account.
- [Cost Explorer shows spend. It does not find idle AWS.](https://unusd.cloud/blog/cost-explorer-wont-find-idle-aws-resources): Cost Explorer, Compute Optimizer, Cost Optimization Hub, and Budgets show AWS spend. They do not name the idle resource. A read-only scan does.
- [Navi: ask the scan, not the open web](https://unusd.cloud/blog/navi-ask-your-aws-scan-not-the-internet): Navi is grounded in your latest AWS scan. It ranks remediations, cites resource IDs, and does not change a resource in your account.
- [A Telegram digest for people who do not live in #finops](https://unusd.cloud/blog/telegram-channel-for-aws-executive-cost-digest): The executive AWS cost digest posts to a Telegram Channel you own. Per-account scans stay on email, Slack, or Teams.
- [Catch AWS spend drift before the invoice](https://unusd.cloud/blog/aws-spend-drift-before-the-invoice): Flags spend that breaks your usual pattern, then forecasts end of month and end of year from the same scans.
- [Your Jenkins box does not work weekends. It still bills them.](https://unusd.cloud/blog/stop-paying-for-aws-nights-and-weekends): Flags working-hours AWS resources and estimates what a stop schedule would save.
- [Buy unusd.cloud on AWS Marketplace (one bill, no new vendor)](https://unusd.cloud/blog/unusd-cloud-is-now-available-on-aws-marketplace-simpler-smarter-and-directly-on-your-aws-bill): Subscribe against your existing AWS invoice. Ask for a private offer when procurement needs it.
- [EKS extended support is a $0.60/hour tax. Plan the upgrade.](https://unusd.cloud/blog/aws-extended-eks-support-hidden-costs-and-how-to-avoid-them): EKS extended support is six times standard cluster pricing. RDS, OpenSearch, and ElastiCache have the same trap.
- [The $32 NAT that never shows up in standup](https://unusd.cloud/blog/low-signals-these-small-amounts-that-are-draining-your-aws-budget): Small charges (NAT, Elastic IPs, snapshots, VPC endpoints) add up across accounts and regions.
- [How to find idle AWS resources without living in the CLI](https://unusd.cloud/blog/uncover-hidden-aws-costs-a-guide-to-spotting-idle-resources): CloudWatch and the AWS CLI can find idle EC2, RDS, and EBS. You will miss a region.
- [More Lambda memory can cost less. Idle Lambda still costs.](https://unusd.cloud/blog/aws-lambda-hack-boost-memory-to-slash-costs-and-turbocharge-heavy-workloads): A bigger Lambda can finish cheaper. That does not help functions nobody invokes.
- [AWS bill shock is usually a forgotten account, not a hack](https://unusd.cloud/blog/aws-cost-optimization-horror-stories-and-solutions): Most bills you can prevent are idle resources and zombie accounts, not account takeovers.
- [The AWS bill that grew while nobody was looking](https://unusd.cloud/blog/how-unusd-cloud-can-slash-your-cloud-bill): Read-only scans find idle EC2, detached EBS, and forgotten RDS before finance does.

## The zoph.io galaxy

All of the following are operated by Victor Grenu through zoph.io, an independent AWS consulting boutique.

- [zoph.io](https://zoph.io): The consulting boutique. AWS architecture, security audits and hardening, automation and DevSecOps, cloud cost optimization, and secure AI and LLM adoption.
- [zoph.me](https://zoph.me): Personal weblog on AWS, IAM, cloud security, architecture, automation, FinOps, and indie consulting.
- [unusd.cloud](https://unusd.cloud): Read-only AWS scans across 30+ services and every region. Weekly digest by email. Full report in the app.
- [IAMTrail](https://iamtrail.com): Archive of every change to AWS Managed IAM Policies since 2019, with full version history and diffs, plus AWS endpoint and GuardDuty change feeds.
- [github.com/zoph-io](https://github.com/zoph-io): Open-source AWS tooling, including ClickOps Sentinel, AWS Security Survival Kit, AWS Trustline, and Subnet-Watcher.
- [fwd:cloudsec Europe](https://fwdcloudsec.org/conference/europe/): Vendor-neutral cloud security conference. Victor is an organizer and CFP reviewer.