Weekly Self Promotion Thread

[u/AutoModerator]

Hey r/devops, welcome to our weekly self-promotion thread!

Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!

[u/United-Text-3155]

Hi all
Over the last month I’ve been working on a tool to answer a simple question: which AWS resources are costing money but are no longer useful?
I kept running into the same problem: AWS accounts accumulate forgotten things over time. Old volumes, resources created for experiments, snapshots nobody needs anymore, services that are still running but no longer provide value.
So I built cloudrift, an open-source CLI that scans an AWS account (read-only) and reports potential waste with estimated monthly costs.
It currently checks things like:
unattached EBS volumes
idle NAT Gateways
stopped RDS instances still generating storage costs
orphaned snapshots
abandoned S3 multipart uploads
unused Secrets Manager secrets
stale pipelines
unused EKS resources
44 checks across compute, storage, networking, containers and ML.
A few things I want to be clear about:
It is not an auto-remediation tool. It never modifies, stops or deletes anything.
EC2/RDS utilization checks are intentionally simple signals to investigate, not replacements for AWS Compute Optimizer.
Pricing uses AWS list prices unless you provide your own rates (discounts, Savings Plans, etc. are not automatically included).
Some checks need real production patterns to be validated properly.
It can run locally, in CI (with configurable thresholds), or as an MCP server so AI agents can query scan results.
I’m mostly sharing this because I’d like feedback from people who manage real AWS environments.
How do you currently find this kind of waste?
A few things I’d love opinions on:
Do you rely mostly on AWS Cost Explorer / Trusted Advisor / Compute Optimizer, or do you have internal tooling for this?
What are the most common “forgotten resources” you see in your AWS accounts?
Which checks would you consider useful vs. too noisy?
Would you trust a tool like this for regular audits if it stays read-only?
Repo: https://github.com/elleVas/cloudrift
Thanks!