# AWS cost optimization and remediation | PointFive Canonical: https://www.pointfive.co/coverage/aws Optimize AWS costs with waste detection across EC2, RDS, S3, EBS, Lambda, EKS and more. PointFive delivers cost visibility, intelligent savings, and verified ROI for AWS environments. [All coverage](https://www.pointfive.co/coverage) # AWS coverage Analyze AWS spend and resource usage across EC2, RDS, S3, EBS, Lambda, EKS, and more. ## Investigate AWS usage ### Cost visibility See every dollar and what's driving it across all AWS services, compute, storage, networking, and data. ### Waste detection Identify unnecessary NAT Gateway traffic and unused EBS snapshots. ### Remediation tracking Send findings to Slack, Jira, Teams, or ServiceNow and track each change through resolution. [Explore PointFive OS](https://www.pointfive.co/products/pointfive-os) ## AWS coverage details | Service or resource | What PointFive analyzes | | --- | --- | | EC2 instances | Rightsizing, scheduling, generation upgrades, and idle instance detection across all instance families. | | EBS volumes and snapshots | Orphaned volumes, snapshot bloat, gp2-to-gp3 migration, and unused AMI cleanup. | | RDS databases | Idle databases, oversized instances, storage autoscaling, and multi-AZ rightsizing. | | Networking and NAT Gateway | VPC Flow Log analysis to detect NAT Gateway waste, unused Elastic IPs, and idle load balancers. | | Lambda and serverless | Memory rightsizing, duration optimization, and provisioned concurrency analysis. | | S3 storage | Lifecycle policy gaps, storage class optimization, multipart upload cleanup, and versioning analysis. | - Service or resource EC2 instances What PointFive analyzes Rightsizing, scheduling, generation upgrades, and idle instance detection across all instance families. - Service or resource EBS volumes and snapshots What PointFive analyzes Orphaned volumes, snapshot bloat, gp2-to-gp3 migration, and unused AMI cleanup. - Service or resource RDS databases What PointFive analyzes Idle databases, oversized instances, storage autoscaling, and multi-AZ rightsizing. - Service or resource Networking and NAT Gateway What PointFive analyzes VPC Flow Log analysis to detect NAT Gateway waste, unused Elastic IPs, and idle load balancers. - Service or resource Lambda and serverless What PointFive analyzes Memory rightsizing, duration optimization, and provisioned concurrency analysis. - Service or resource S3 storage What PointFive analyzes Lifecycle policy gaps, storage class optimization, multipart upload cleanup, and versioning analysis. [Explore the efficiency library](https://www.pointfive.co/efficiency-hub?provider-name=AWS) ## AWS services in context Review Kubernetes workloads on EKS, data pipelines on EMR, and AI workloads on Amazon Bedrock and SageMaker AI alongside the infrastructure they use. Coordinate S3 lifecycle policies with application usage and investigate public internet access where VPC endpoints could be used. ## Enterprise-grade security and controls Independent audits, clear privacy commitments, and controls that keep your organization in charge. Explore our certifications, security reports, and access safeguards. [Visit our Trust Center](https://trust.pointfive.co/) - [SOC 2 Type II Details](https://trust.pointfive.co/) - [ISO 27001 Details](https://trust.pointfive.co/) - [GDPR Details](https://www.pointfive.co/privacy) - [CCPA & CPRA Details](https://www.pointfive.co/ccpa) - [SAML SSO Details](https://www.pointfive.co/faq#teams-collaboration) - [Access controls Details](https://www.pointfive.co/products/pointfive-os#dataset-access) - [Penetration testing Details](https://trust.pointfive.co/) ## Frequently asked questions ### How does PointFive connect to my AWS account? PointFive uses a read-only IAM role with minimal permissions for discovery. Discovery uses read-only access. Automated remediation uses customer-authorized permissions, and each customer chooses how changes are approved: per change, once for a trusted playbook, or not at all. Guided onboarding connects discovery without agents or code changes. ### Which AWS services does PointFive optimize? PointFive detects waste across EC2, RDS, S3, EBS, Lambda, EKS, Fargate, NAT Gateway, CloudWatch, MSK, SageMaker AI, Amazon Bedrock, and more. ### How is PointFive different from AWS Cost Explorer? AWS Cost Explorer analyzes AWS cost and usage and provides EC2 rightsizing and commitment recommendations. PointFive adds DeepWaste investigation across services and layers, and helps engineers fix findings in the tools they already use, with verified tracking. ### What kind of savings can I expect? Savings depend on your workloads and the changes you implement. Evaluate recommendations against workload requirements and measure realized savings against actual usage and billing after remediation. ### Can I buy PointFive through AWS Marketplace? Yes. PointFive is listed on AWS Marketplace as [PointFive Cloud & AI Efficiency](https://aws.amazon.com/marketplace/pp/prodview-xmaaw4f7qya3i) , sold as a SaaS contract. ### What security controls apply to AWS? Read-only discovery does not modify your resources. Automated remediation requires customer-authorized permissions and approval. Least-privilege IAM role with minimal permissions. Data encrypted in transit and at rest. SOC 2 Type II. No agents to install or maintain. ## Other platforms [All coverage](https://www.pointfive.co/coverage) - ### [Azure](https://www.pointfive.co/coverage/azure) - ### [GCP](https://www.pointfive.co/coverage/gcp) - ### [OCI](https://www.pointfive.co/coverage/oci) - ### [Kubernetes](https://www.pointfive.co/coverage/kubernetes) - ### [Snowflake](https://www.pointfive.co/coverage/snowflake) - ### [Databricks](https://www.pointfive.co/coverage/databricks) --- Source: the public page above. Product screenshots and illustrative interfaces are examples, not live customer data.