I had a key compromise. They spun up resources across the world. I had to go on a safari to hunt and kill all the things they created in each region. I would’ve loved to of had a single view to see all the resources running across all regions. That would’ve been super helpful.

This might help:

https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/fi...

Regions and tags are optional, which will show you everything.

This.

This is one thing that GCP has done so brilliantly right - the projects structure. From an organisation point of view, this is the most seamless way of managing billing+access , instead of mucking about ARN crap.

It's puzzling that AWS has still not been able to roll this out. What's so hard ? roll out projects and put all existing customers in a default project.

3rd party services offer this for sure - https://www.cloudhealthtech.com/ - https://cloudcheckr.com/

And several others.

Does the billing dashboard not cover your needs? With their billing query UI you can slice your billing data by region, service, etc.

The billing API tells you about resources that have charged you, whereas I think the parent comment is talking about resources that are either “active” in some sense where they will charge you at some point in the future for the usage you’re accruing (but where this usage isn’t metered in a way visible to the billing API until it “commits” somehow); or, worse, resources which are “exposed” in some sense where they could charge you if they received a request, but happen to not have received any yet. (These resources are very easy to lose track of.)

Another way to think of this question is “what is my current exploitable attack surface, against the ‘attack’ of causing AWS to charge me lots of money?”

They do only show what you have been charged, but to my knowledge this is update very regularly. It seems at least next day.

and by Tag, which is the most useful way to organize your resources for internal billing/analysis.

Don't see any missing functionality but our use case may not be complex enough.

Yes that's retrospective, I'd like to see everything in use now that costs money, with links to direct manage those resources.

You can also check out https://divvycloud.com/, which is similar and supports a few other clouds.

Have you looked at AWS Config? Config gives you the ability to build asset inventories and be alerted when things change.

It only works regionally, but it's better than nothing.

I’ve been using komiser.io for this. I saw it here on Show HN about a month ago and have been using it ever since

It’s not in Amazon’s interest to make billing easy to understand

This isn't really true. Billing opacity scares off small clients (it's one of the biggest reasons that, as a consultant, my clients leaned away from AWS) and can make larger clients consider diversification or divestiture.