Quick Start Guide
Get up and running with CloudWise.
π Choose Your Pathβ
CloudWise offers two ways to analyze your AWS costs:
| Path | Best For | Requirements |
|---|---|---|
| π Online Mode | Ongoing daily scans and alerts | Permission to create an IAM role and a CloudFormation stack |
| π Air-Gapped Mode | Evaluation, compliance-restricted environments | AWS CloudShell access to run the export script, plus a Cost and Usage Report (CUR) CSV file from your account |
If your company has strict compliance rules or you want to evaluate CloudWise before connecting your AWS account, try Air-Gapped Mode! Upload your Cost and Usage Report (CUR) CSV, which is required, together with the ZIP file our export script creates in AWS CloudShell, which waste detection needs. No IAM role and no cross-account access.
π Online Mode Setupβ
π Prerequisitesβ
Before you begin, make sure you have:
- An AWS account with billing access
- Permission to create an IAM role and a CloudFormation stack
- A CloudWise account (sign up at cloudcostwise.io)
π Step-by-Step Setupβ
Step 1: Try the Workspace on Sample Data (no signup)β
- Visit cloudcostwise.io and open the Workspace
- It loads on a curated sample accountβtalk to the agent, ask "where's my waste?", and see exactly what the live product looks like (same surface, sample data)
- When you're ready, click Connect to bring the agent onto your own account
Step 2: Create Your CloudWise Accountβ
- From the Connect flow, register with email (or SSO / magic-link)
- Verify your email
- Free is available forever (1 AWS account, a daily scan with 20 of the 46 detectors, 5 agent questions a day), or choose Shield ($19/mo or $149/year) for anomaly alerts, all 186 waste checks and more
Step 3: Connect Your AWS Accountβ
- Continue through the Connect flow in the Workspace
- Follow the guided CloudFormation setup to create a read-only IAM role (details in the AWS Setup Guide)
- The agent moves from sample data onto your real scan data (the Live state)
Step 4: Wait for Data Collectionβ
- Your first waste scan starts as soon as you connect, and the Workspace shows it running. After that, your account is scanned once a day
- Cost data appears once AWS delivers your Cost and Usage Report; for a brand-new report configuration, AWS itself may take up to 24 hours to deliver the first one
Step 5: Set Up Alerts (Shield Plan)β
- Open Settings β Notifications
- Enable Cost Anomaly Detection for automatic spike alerts
- Connect Slack for instant notifications
- Optionally set up budget alerts
π‘οΈ CloudWise Shield Featuresβ
Shield (the Watch rungβ$19/mo or $149/year) includes:
- β Automatic cost anomaly detection
- β Slack & email alerts for cost spikes
- β Up to 5 AWS accounts
- β 50 agent questions per day
- β All 186 waste checks
π― What's Next?β
Now that you're set up, explore these key features:
- π€ The agent (Workspace): Ask questions about your costs in plain English - Learn More
- π¨ Anomaly Detection: Automatic cost spike alerts - Learn More
- ποΈ Waste Detection: 186 waste checks across 40+ services - Learn More
- π§ AI Remediation: Let the agent propose and (on Agentic) execute fixes - Learn More
Try the Agent Now!β
Open the Workspace and ask:
- "What are my top services?"
- "How much am I spending this month?"
- "Where can I save money?"
π Need Help?β
- π Read the AWS Setup Guide for detailed connection instructions
- π¬ Check our FAQ for common questions
- βοΈ Contact support at support@cloudcostwise.io
π Air-Gapped Mode Quick Startβ
Air-Gapped Mode lets you analyze your AWS costs without connecting your AWS account to CloudWise. Perfect for:
- Security-conscious organizations with strict compliance requirements
- Evaluating CloudWise before committing to full integration
- One-time cost audits without ongoing monitoring
Step 1: Run the Export Script in AWS CloudShellβ
-
Open AWS CloudShell in your AWS Console
-
Download the CloudWise export script and verify its checksum:
# Download the script and its checksum
curl -sLO https://cloudcostwise.io/scripts/cloudwise-export.sh
curl -sL https://cloudcostwise.io/scripts/SHA256SUMS | grep cloudwise-export.sh > SHA256SUMS
# Verify integrity before running
sha256sum -c SHA256SUMS 2>/dev/null || shasum -a 256 -c SHA256SUMS
# Run the script
bash cloudwise-export.shData Loss Prevention PoliciesFor organizations with strict Data Loss Prevention policies, add the
--anonymizeflag. It replaces the names and identifiers it recognizes with pseudonyms before they leave your network. It is not complete and some fields stay raw, so review the output before you upload it.bash cloudwise-export.sh --anonymizeMulti-Region ExportTo analyze resources across multiple AWS regions in a single upload:
bash cloudwise-export.sh --regions us-east-1,eu-west-1,ap-southeast-1Global services (CloudFront, Route53) are exported once automatically. Without
--regions, the script exports only the current CloudShell region.Why verify the checksum?Verifying the SHA256 checksum ensures the script hasn't been tampered with in transit. The checksum file is published alongside every release. Learn more β
Minimal AWS API CostThis script incurs minimal AWS API costs. Most API calls (describe/list) are free. The paid calls are CloudWatch GetMetricStatistics ($0.01 per 1,000 requests), S3 ListObjectsV2 (one per bucket, $0.005 per 1,000) and Cost Explorer (4 requests per region at $0.01 each, $0.04 per region).
-
Wait for the export to complete (it takes longer with more resources and regions)
-
Download the generated
cloudwise-export.zipfile
Step 2: Download Your CUR Reportβ
Download your Cost and Usage Report (CUR) CSV as well. It is required: CloudWise will not start an upload without it.
- Go to AWS Billing Console
- Navigate to Cost & Usage Reports to see the S3 bucket your report is delivered to
- Download the latest CUR CSV file (
.csvor.csv.gz) from that bucket
Step 3: Upload to CloudWiseβ
- Log into CloudWise and open Air-Gapped Mode (the offline path of the Connect flow)
- Start a new upload
- Upload your files:
- Required: your CUR CSV file
- Needed for waste detection:
cloudwise-export.zip(the upload can proceed without it, but then CloudWise only analyses costs, with no waste findings)
- Follow the instructions on the page
Step 4: View Resultsβ
Once the upload finishes processing, you'll see your waste findings as a ranked list, with the estimated saving.
Air-Gapped Mode covers up to 158 of the 186 waste checks with the full export, spanning EC2, EBS, RDS, Lambda, S3, DynamoDB, and more β with multi-region support via --regions. The remaining 28 checks require Online Mode: AWS Compute Optimizer rightsizing (4), Reserved Instance / Savings Plan purchase recommendations (8), the live-lookup commitment detectors β unused/expiring RI and SP tracking and convertible-RI exchange suggestions (6; the CUR-based unused-reservation checks still run offline), unused API Gateway APIs (1), unused KMS keys (1), CloudTrail duplicate-trail and lifecycle checks (2), unused CloudFront distributions (1), unused Route 53 hosted zones (1), orphaned DNS record cross-referencing (1), the Elastic Beanstalk orphaned-RDS cross-service check (1), never-subscribed Kinesis enhanced fan-out consumers (1), and idle OpenSearch domains (1), whose cross-cluster connections the export doesn't carry β each of these needs a live AWS API call the offline export can't provide.
For regulated enterprises: Compliance tier ($99/mo or $799/year) extends Air-Gapped Mode with 365-day data retention, consistent anonymization (client-held salt), and quarter-over-quarter variance reports, including by tag.
β³ Data availability: Online, waste findings from the first scan, which starts when you connect, and cost data once AWS delivers your Cost and Usage Report (up to 24 hours for a new one). Air-Gapped, as soon as your upload is processed.