I just finished dev on whatsinmycloud.com. It scans your AWS account, finds the wasted spend and security holes, and gives you ten prioritised fixes.

I built it because a lot more people are shipping to AWS now without having spent years learning it, and AWS does a poor job of showing you what's actually costing money or sitting wide open.

The scan only needs read-only access - describe/list/get - no write permissions. Free for the minute while I get feedback.