推奨事項は読むものではなく、実行するもの。

Flexsave Coverage Alert - Daily Flexsave spending drop alert

Sends a daily email alert when yesterday’s Flexsave spend dropped compared with the preceding six-day average, so FinOps and cloud owners can spot lost coverage or savings early.

By Piyush Patil

Flexsave Coverage Alert - Daily Flexsave spending drop alert

Sends a daily email alert when yesterday’s Flexsave spend dropped compared with the preceding six-day average, so FinOps and cloud owners can spot lost coverage or savings early. Schedule: Runs every day at 09:00 America/New_York. Logic: Queries the aws_dci dataset for the last seven days of Flexsave spend, with missing days zero-filled. It calculates the average of the six days before yesterday and compares it with yesterday’s spend. The difference is drop_usd. If drop_usd > 0, the flow takes the True branch and sends the alert email. Otherwise it ends silently on the False branch. The email is also skipped if the referenced values are empty. Output: One email containing the usage date, yesterday’s Flexsave cost, the six-day average, and the dollar drop. Dates and amounts are formatted with consistent decimal places and thousands separators. Intended users: FinOps practitioners, cloud cost owners and engineering managers who monitor Flexsave coverage.

By Piyush Patil

test flow Piotrs template 1

test description of a new template

By Piotr Balwierczak

test flow

erttre

By Piotr Balwierczak

List DoiT Account team

Lists your doit account team

By Olivier Boukili

Create Terraform remediation PRs from Proprietary Insights

Automatically open Terraform GitHub Pull Requests from actionable Composer Proprietary insights straight into onboarded GitHub repositories. Requires enabling the Terraform PR agent in the integrations menu, and onboarding Proprietary Insights.

By Olivier Boukili

Weekly Azure VM tag compliance Report

Weekly schedule lists Azure VMs, extracts resource group, filters VMs missing required tags, and sends a notification

By Manak Wadhwa

Schedule VM Power Off

Runs daily at 18:00 GMT to power off running Azure VMs tagged auto-shutdown: true within the subscription. Only tagged VMs are affected. Intended for use by Ops/FinOps teams.

By Diego Viviani

Deallocate Stopped Azure VMs after approval

This flow finds Virtual Machines that are in the Stopped state (still incurring compute charges) and pauses for human approval before deallocating them.

By Manak Wadhwa

Delete empty Azure App Service Plans after approval

This flow identifies and helps clean up empty App Service Plans in a specific Azure subscription to reduce unnecessary costs.

By Manak Wadhwa

Notify owners of AWS Health scheduled maintenance

Turns AWS Health maintenance emails into Slack alerts for the instance owners. An email trigger receives the AWS Health notification ([email protected]), AI extracts the affected account, region, instance IDs and action deadline, EC2 DescribeTags looks up each instance's Owner tag, and a Slack message tells the channel who owns the affected instances and what to do before the deadline.

By Vadim Solovey

Delete Oracle Cloud volume backups older than 90 days

Finds available OCI block-volume backups older than 90 days and requests approval before deleting them.

Abort incomplete Oracle Cloud multipart uploads after 7 days

Preserves existing OCI Object Storage lifecycle rules and requests approval before adding a rule that aborts incomplete multipart uploads after seven days.

Stop Oracle Cloud sandbox instances after 14 days

Finds running OCI compute instances tagged Environment=Sandbox, waits until they are older than 14 days, and requests approval before stopping them.

Delete unused Oracle Cloud reserved public IPs

Finds unassigned OCI reserved public IP addresses and requests approval before deleting them.

Delete unattached Oracle Cloud block volumes

Finds available OCI block volumes and requests approval before deleting them.

Delete idle Azure Virtual Network Gateways after approval

This flow identifies and helps clean up unused (idle) Virtual Network Gateways in a specific Azure Resource Group to reduce unnecessary costs.

By Manak Wadhwa

Revoke AI provider API keys via webhook

Receives API key revocation requests from external security and governance systems via webhook, validates and deduplicates each request, and revokes the targeted OpenAI, Anthropic, Amazon Bedrock, or Gemini API key only after email approval

By Vadim Solovey

Delete unattached Azure managed disks

Finds unattached Azure managed disks in a selected subscription and requests approval before deletion.

By Vadim Solovey

Delete unused Azure public IP addresses

Identifies unused Azure public IP addresses in a selected subscription and requests approval before deletion.

By Vadim Solovey

Enforce Anthropic API key spend thresholds

Runs daily for security and FinOps teams, estimates each Anthropic API key's share of the previous day organization cost from token usage, requests approval before deactivating keys over their USD threshold

By Vadim Solovey

Audit never-used Anthropic API keys

Helps security and platform teams audit up to 100 Anthropic Admin API keys, identify active keys that have never been used, and email a remediation-focused report.

By Vadim Solovey

Audit stale and never-used OpenAI API keys

Helps security and platform teams audit OpenAI Admin API keys, identify keys unused for more than 90 days or never used, and email remediation-focused reports.

By Vadim Solovey

RDS Engines Nearing EOL

Weekly notification for DBA, platform, and FinOps teams listing RDS DB instances approaching the end of standard support, within a configurable lookahead window.

By Aamir Haroon

Identify underused AWS Reserved Instances across services

Detect RI utilization via Cost Explorer GetReservationUtilization for EC2, RDS, ElastiCache, Redshift, and Elasticsearch.

By Satyam Gupta

GCP Persistent Disk Archive Snapshots

Create cost-efficient Archive snapshots for all (or subset) GCE Persistent Disks in a project on a schedule, and automatically delete snapshots older than your retention window.

By Erez Shtayman

Optimize eligible RDS io1/io2 volumes to gp3

Optimize eligible RDS io1/io2 volumes to gp3 for lower storage costs while preserving performance.

By Aamir Haroon

Google Cloud PD SSD Rightsizing Opportunities

Analyzes historical Google Cloud Persistent Disk metrics to identify pd-ssd volumes with low observed peak IOPS and throughput, and flags disks that are likely over-provisioned for their current workload.

By Erez Shtayman

AWS Commitment Expiration Monitor

This flow monitors Reserved Instance expirations across RDS, ElastiCache, OpenSearch, Redshift, and EC2, as well as Savings Plans for Compute, SageMaker, Database, and EC2.

By Satyam Gupta

Tagging Coverage Trend

Assesses AWS tagging hygiene by tracking tagged vs untagged spend over the last 30 days and prior period, surfacing trends, top untagged services, and actions to improve cost allocation.

By Erez Shtayman

First-Time Service Detection

Detects new AWS services or SKUs generating cost, flags first-time spend, filters noise, rates risk, and alerts on unexpected or unapproved usage.

By Erez Shtayman

Tagging Coverage Trend

Assesses Google Cloud tagging hygiene by tracking tagged vs untagged spend over the last 30 days and prior period, surfacing trends, and top untagged services.

By Erez Shtayman

First-Time Service Detection

Detects new Google Cloud services or SKUs generating cost, flags first-time spend, filters noise, rates risk, and alerts on unexpected or unapproved usage.

By Erez Shtayman

Time-to-Tag Leakage

Identifies AWS services generating cost before tags are applied to surface spend that cannot be allocated due to untagged resources.

By Erez Shtayman

Bedrock FinOps Overview

Notifies FinOps and engineering when a Bedrock inference profile has meaningful GenAI spend, surfacing daily cost, cost per million tokens, efficiency, and cache effectiveness.

By Erez Shtayman

Time-to-Tag Leakage

Identifies Google Cloud services generating cost before tags are applied to surface spend that cannot be allocated due to untagged resources.

By Erez Shtayman

Alert on Unused G-Suite Licenses

Review current Google Workspace (G Suite) licenses; provision additional licenses upon approval when needed, or notify stakeholders of license utilization (in use vs total)

Surface unused GCP IP Addresses

List unused GCP IP addresses and notify

By Jean-Alain Mignon

Detect EKS cluster that will be on extended support in 90 days

Detect EKS clusters that their version is about to move to extended support in 90 days and create a DoiT Thread

By Erez Shtayman

Detect extended support EKS clusters

Detect EKS clusters that use K8s version that is classified as extended support. Upgrade to newer versions to save money

By Erez Shtayman

Apply labels to GCE instances

Automatically add labels to GCE instances that are missing specified labels

By Vlad Blaj

Check for org tagging policies

Check if there is active AWS tagging policy in place to ensure compliance. If the policy doesn't exist, it would notify relevant stakeholders

By Erez Shtayman

Shutdown Sandboxes after 14 days

Clean-up specified sandbox EC2 instances that exceed a defined maximum runtime.

Insights - Delete idle Elastic Load Balancers

Avoid costs for idle Elastic Load Balancers that has run for at least 14 days but received no traffic during the last 30 days

By Erez Shtayman

Insights - Release unallocated Elastic IPs

Release unallocated Elastic IPs to avoid hourly charges incurred when they are not allocated to a Network Load Balancer, NAT gateway or an EC2 instance

By Erez Shtayman

Insights - Delete idle NAT gateways

Delete NAT gateway if it hasn't received any traffic in the last month and has been running for over 336 hours (14 days)

By Erez Shtayman

Insights - Delete idle Kinesis Data Streams

Delete Kinesis Data Streams if it hasn't received any traffic in the last month and has been provisioned for over 336 hours (14 days)

By Erez Shtayman

GCP Cloud Storage soft delete list and update

List all buckets in specific GCP project with Soft Delete over 0, and then change it to 0 to effectively remove soft delete.

By Zach Almeida-Beers

Create a DoiT support ticket for active unacknowledged anomalies

When a cost anomaly has not been acknowledged by your team and is still active, create a ticket for DoiT to investigate

By Erez Shtayman

Automatically add tags to EC2 instances that are missing specified tags

Tag EC2 instances that have no tags or only a tag for Name or name.

By Fred Breton

Abort multipart uploads to S3 Buckets after set time period

Apply a lifecycle policy to S3 Buckets to abort multipart uploads after 7 days.

By Sam Clark

Insights - Migrate from gp2 to gp3

Amazon EBS gp3 volumes provide up to 20% lower price than gp2 volumes. Affected volume IDs will be provided using DoiT Insights API

By Vlad Blaj

Delete unused EBS volumes

Detect unused EBS volumes, create snapshot, delete after approval

Apply deletion protection on network firewall

Prevent the accidental or malicious deletion of critical resources on AWS Network firewall

Stop RDS instances based on tags

Save costs on dev RDS instances with a scheduled task based on tags

Tag MAP-eligible EC2 and RDS workloads

Add the "map-migrated" tag to EC2 and RDS workloads launched after a certain date

Apply a 365 day retention policy on CloudWatch log groups

Filters for CloudWatch log groups without retention policies and applies a 365-day lifecycle

By Bogdan Kirylyuk

Convert RDS volumes from gp2 to gp3

Switching Amazon RDS gp2 to gp3 allows you to provision storage performance independently of storage capacity

By Kate Gawron

Delete unattached compute disks

List unattached compute disk and delete after approval

By Erez Shtayman

Convert EBS volumes from gp2 to gp3

Amazon EBS gp3 volumes provide up to 20% lower price than gp2 volumes

Release Static IPs

Release static IPs that are not used by EC2 and Route53

By Erez Shtayman