The BestPracticeForIdleResourceDetection compliance package detects idle resources across services such as Elastic IP Address (EIP), Internet Shared Bandwidth, Virtual Private Cloud (VPC), and VPN Gateway. Identify and reclaim idle resources early to reduce cost waste.
|
Rule name |
Rule description |
|
Checks that all ALB instance listeners have at least one backend server. Instances created within the grace period (default: 7 days) are skipped. |
|
|
Checks that a resource is attached to each Internet Shared Bandwidth instance. Instances created within the grace period (default: 7 days) are skipped. |
|
|
Checks that a namespace and an image repository exist for each Container Registry instance. Instances created within the grace period (default: 7 days) are skipped. |
|
|
Checks that each disk is in the In Use state. Disks created within the grace period (default: 7 days) are skipped. |
|
|
Checks that a resource is attached to each EIP. EIPs created within the grace period (default: 7 days) are skipped. |
|
|
Checks that each Internet NAT gateway has an attached EIP with SNAT or DNAT entries configured. Gateways created within the grace period (default: 7 days) are skipped. |
|
|
Checks that each VPC NAT gateway has an attached EIP with SNAT or DNAT entries configured. Gateways created within the grace period (default: 7 days) are skipped. |
|
|
Checks that a mount target exists for each NAS file system. File systems created within the grace period (default: 7 days) are skipped. |
|
|
Checks that at least one listener is running on each SLB instance. Instances created within the grace period (default: 7 days) are skipped. |
|
|
Checks that each VPN gateway has destination-based and policy-based routes configured with BGP auto-propagation enabled. Gateways created within the grace period (default: 7 days) are skipped. |
|
|
Checks that each ECS instance is not in the Stopped state. |