CloudCheckr Updates

February 10, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 10, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Basic Users can be given access to Email Settings
You can now give your Basic Users access to the Email Settings page. This can be accomplished by leveraging User Groups. When configuring the user group, you can enable the Email Settings option within the Settings tab to let the members of the user group view the Email Settings. To also give them the ability to modify Email Settings you will want to select the Edit Emails checkbox within the Generic tab. Add the Basic Users you would like to have these capabilities to the User Group.

Added the ability to save custom favicons
Admin users can upload their own favicon to the Settings > Customization menu.
Note that the favicon must be an .ico file.

AWS UPDATES

Added daily emails from multi-account view Advanced Grouping report
You can now configure your saved filters from a multi-account view Advanced Grouping report to send daily via email.

Kinesis has been added to Custom Reports
Within the Inventory module you can now create and save the Kinesis List of Streams report to Custom Reports.

AZURE UPDATES

Saved Filters added to the Advanced Grouping report
You can now create Saved Filters, including the performance benefit, within the Azure Advanced Grouping report.


February 3, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 3, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Spotinst Integration
Spotinst is a cloud-cost management platform that helps AWS customers reduce spend while ensuring high availability and performance, by leveraging cloud providers’ excess capacity. This integration allows you to enable and login to Spotinst directly from CloudCheckr.

AZURE FEATURES

Ability to force Azure billing collection
When setting a month to reload within the Reload Usage Report, you can now have CloudCheckr force the billing update to run, ensuring you get your billing updates immediately.

Added last processed data to the Reload Usage Reports screen
You can now see the last time that CloudCheckr processed any historic billing month from the Reload Usage Reports screen.

Added the ability to report on cost data for subscriptions that are not part of an Enterprise Agreement
If you add an Azure subscription to CloudCheckr that is not part of an Enterprise Agreement, CloudCheckr can now retrieve and report on that subscription’s costs.


January 26, 2017

CloudCheckr will be performing a scheduled system update on Thursday, January 26, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Implemented Right-Sizing Workflows
CloudCheckr now gives you the ability to control who can request Right-Sizing modifications, and who can approve and execute those requests. This new feature, called Workflows, will be rolled out to all the automation tasks.

To enable this capability, you must utilize the new User Group functionality. When added account access to a user group, within the Automation tab, you will see two new permissions: Open Workflow and Admin Workflow. Open Workflow is the permission that should be given to users that you would like to submit requests. Users with Admin Workflow permissions will be able to deny or approve the requests. Once a request is approved, CloudCheckr will immediately action that request. Workflows also retain a log, and notes, for any and all changes.

Added Predicted Usage to EC2 List of Instances Export
The export of the EC2 List of Instances report now includes a column for the predicted instance usage.

AZURE FEATURES

Added a Perimeter Assessment Report
Azure Inventory report will now include a Perimeter Assessment report, which will show you all the entry points from the public Internet into your Azure environment. This report can be accessed within the Security > Secure Configuration menu.

Reworked details of Under-Utilized VM best practice check
The details of the Under-Utilized Virtual Machines best practice check has been updated to provide better clarity into the VMs and the metrics CloudCheckr is reporting against.

Improvements to the Virtual Machine utilization reporting
The Virtual Machine utilization reporting has been improved to provide better statistics for your VMs. You can see this data within the Inventory > Virtual Machine > List of Virtual Machines report.


January 20, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 20, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AZURE FEATURES

Added CSV option for Invoice Generator
The invoice generator within Azure accounts now supports the ability to export the invoices in CSV format.

Added Custom Reports to Inventory reports
The Azure Inventory reports will now allow you to save your filter configurations as custom reports. This prevents you from having to rebuild your reports each time you want view them.

New Best Practice Check – Under-Utilized Virtual Machines
A new best practice check has been added to the Usage tab, showing the Virtual Machines that are determined to be under-utilized based on their CPU usage.


January 13, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 13, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Added Untagged Resources report to multi-account views
The Untagged Resources report has been added to multi-account views. This report can be found within the Inventory module.
Newly added accounts will default to the Classic Best Practice report
When new accounts are added to CloudCheckr they will default to the ‘Classic’ best practice view, instead of the Dashboard view.

AZURE FEATURES

Added Best Practice report for Azure
Azure accounts will now have a Best Practice report. There is one best practice check to start (Security Rules Allowing All Inbound Traffic), and additional checks will be added with each update.


January 07, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 07, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Added ability to find security groups with specific port open
The Security Group Common Searches report now has a new option which allows you to find security groups that have specific port open. You can find this report within the Security > Secure Configuration > Security Groups report menu.

AZURE FEATURES

Support for Azure Government
CloudCheckr now supports Azure Government. When adding a new Azure account into CloudCheckr you will choose whether the account is commerial or government.

Added Security Group reports
A new report menu has been added for Azure security group reporting.

Added the ability to group by tag within Advanced Grouping
Azure Advanced Grouping report now allows you to group by tag, in addition to filtering by tag.

Added Virtual Machine History by Instance report
Added a new report within Inventory > Virtual Machine > Trending, that shows Virtual Machine history by instance.


December 29, 2016

CloudCheckr will be performing a scheduled system update on Thursday, December 29, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Updated Bookmark Icon
The bookmark icon has been updated to better reflect that its purpose.

Improved Show/Hide Report Help Text
Reports with help text at the top now have an easily identifiable button to show or hide the text.

AWS Features

Added ability to Lock billing months
In the Reload DBR screen, which is found under Cost > AWS Partner Tools > DBR, you can now lock historic billing months. When a month is locked, its DBR cannot be reloaded, preventing any changes to the cost data. This feature is intended to help reseller customers from adding custom charges or other modifications, and having those applied historically, modifying the numbers after the month has been closed.

Added scoring icons to EC2 Right-Sizing Report
Icons have been added to the EC2 Right-Sizing Report, making it easier to see each instance’s utilization score. This report is found within the Utilization menu.

Added Cost Type option to Dashboard Cost Panes
Dashboard panes for different cost reports now have a Cost Type dropdown, allowing them to be built against Blended, Unblended, or List cost.

‘White List’ has been renamed ‘Ignore List’ in Automation Tasks

New Best Practice Check

  • Auto-Scaling Launch Configuration configured with Previous-Generation instance types

New API call

  • get_best_practices_v2

Azure Features

Cost Budget Alert
You can now configure cost alerts against your Azure subscriptions. The budget alert builder can be found within the Cost menu.

Added Cost Tag Filtering to Advanced Grouping
You can now filter the costs in Advanced Grouping by resource tags. Note: Grouping by tags will be added soon.

Added Resource Group info to reports
You can now see the Resource Group for resources within the Azure inventory reports.

Added Change Monitoring reporting
CloudCheckr will now track when resources are added, modified, or deleted within your Azure accounts. The Change Monitor report can be found within the Inventory menu.

Added additional details to the Virtual Machine Inventory reports
Several additional data points are now present for virtual machines within the Inventory reports.

Added CPU utilization metrics to Virtual Machine reports
CloudCheckr now collects, and reports on, CPU metrics for Azure Virtual Machines.

Added HD Insights to Inventory reports

Added Virtual Networks to Inventory reports


November 26, 2016

CloudCheckr will be performing a scheduled system update on Saturday, November 26, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Reorganized Report Navigation under Security and Partner Tools
Both the Cost > AWS Partner Tools and Security sections of the report navigation have been reorganized for more logical report groupings. The AWS Partner tools menu now makes it easier to know where to go to configure options, versus generating reports, versus managing the DBR. Security is now separated by Secure Configuration reports and Activity Monitoring reports.
NOTE: The Invoice Generator can be found within the Report menu of the AWS Partner Tools.

Payee Support costs now calculate during the month
When configuring Payee Support Charges, you will now see the Costs calculated as the month progresses. Previously these costs would only be calculated one the billing month was finalized.

Payee Support costs can now be applied across all accounts within Account Families
When configuring Payee Support Charges within an Account Family you now have the option to have the total support charge billed to a single account within the Account Family, or spread across each account, based on that account’s usage. This setting is managed within Cost > AWS Partner Tools > Account Families.

Added ability to set available reports within each account
CloudCheckr now allows you to hide entire sections of the report navigation (such as Best Practices, Cost, Inventory, etc.) for each of your accounts. You will be presented with these options when adding new accounts. You can also update existing accounts by loading the account and navigating to Account Settings > Navigation Visibility.
NOTE: This does not override user permissions. Users will still be able to access any reports they have been granted access to.

Added User Groups for easier user management
CloudCheckr now allows you to create user groups, and manage users and permissions at the group level. User Groups will make managing permissions easier, especially for customers with hundreds or thousands of users. When creating Groups you can determine which accounts and reports users within that group will be able to access. Groups are an Admin-only feature, and can be accessed by clicking on the Settings link at the top of the app.

Added Datadog Integration
CloudCheckr has added an integration for Datadog, which allows CloudCheckr to pull metrics from Datadog into your CloudCheckr account. CloudCheckr will use the memory usage metrics from Datadog for better right-sizing reporting. The Datadog integration can be managed within the Account Settings > Integrations > Imports menu.

Idle EC2 Instances report CSV can now be sent via email
When configuring the Utilization > EC2 > Idle Instances report to send a daily email, you can now have CloudCheckr include a CSV of the report in the email.

Added Invoice Generator for Azure billing accounts
Azure Billing accounts will now have access to an Invoice Generator, allowing you to generate invoices for your subscriptions.

CloudTrail Events can now be grouped by region
The CloudTrail Events report (which is now found under Security > Activity Monitoring > AWS API (CloudTrail)) now supports grouping events by Region.

EC2 List of Instances data now includes Source/Dest check and ENI details
Two new datapoints have been added to the Inventory > EC2 > List of Instances report: Source/Dest check and Elastic Network Interface.

Edit Users screen & Admin Email Settings now freeze top of grid when scrolling
The top of the grid is now frozen when scrolling through both the Edit Users screen as well as the Admin Email Settings screen.

Added ability to drill into Adv. Grouping report by clicking on the graph
When generating a report in Advanced Grouping, and choosing Area for the chart type, you can now click on the chart itself to drill into specific datapoints. For example, if you are looking at a cost breakdown by Account and see a spike on a specific day, you can click on that spike and quickly group that day’s data by Service or Description to get a better idea as to the cause of the spike.

Added the ability to search saved filters in Adv. Grouping report
When opening the Saved Filters dropdown in the Advanced Grouping report, you will now have a text box that allows you to easily search through your saved filters.

2 New Dashboard Panes

  • Saved Filter Costs Over Time
  • Best Practice Trends

2 New Best Practice Checks

  • VPC Peering Connections Requester and Peer Not Approved
  • EC2 Instances With Source/Destination Check Set to False

October 19, 2016

CloudCheckr will be performing a scheduled system update on Wednesday, October 19, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

IMPORTANT: Alert emails are now sent from alerts@cloudcheckr.com
Alert emails from CloudCheckr will now be sent from alerts@cloudcheckr.com instead of support@cloudcheckr.com.  This will make it easier to identify and manage these alerts within your inbox.

Alerts in report navigation moved to their respective modules
The report navigation has been reworked, with the various alerts now being placed within their own modules (Cost, Security, Utilization).

Added Best Practice Check Editor
CloudCheckr Admin users will now have the ability to edit the severity level of best practice checks, as well as disable/enable any check.  The Best Practice Editor can be accessed within the Admin Functions dropdown on the main list of accounts.  NOTE: Changes made here will reflect across all accounts.

Ability to choose which order Custom Charges are calculated
When creating monthly percent charge or credit custom charges, you now have the ability to ‘stack’ the custom charges, dictating which order they are applied.  These can be created/managed within the Cost > AWS Partner Tools > Invoice > Custom Billing Charges menu.  To choose an order, first ensure that the Custom charge stacking and ordering option is enabled for the charge, and then enter a value for the order to be applied (1 will be applied first).

RDS List Cost Support added to Account Families
AWS Accounts that are linked together within Account Families will now be able to share their RDS Reserved Instances when CloudCheckr calculates its List Cost.  Account Families can be setup/managed within the Cost > AWS Partner Tools > Invoice menu.

Ability to have invoices saved to an S3 bucket
When scheduling invoices using the Invoice Generator, you now have the ability to have a copy of the invoice uploaded to a user-defined S3 bucket.
NOTE: For this feature to work, the credentials added to the CloudCheckr account must have “s3:PutObject” and “s3:DeleteObject” permissions on the S3 bucket entered.

Ability to add Custom Credit Memos
Within the Cost > AWS Partner Tools > Invoice > Custom Credit Memos report, you will now be able to add custom credits to your account.  Credits added here will show up in all reports in CloudCheckr that reflect credits, and can also be managed within the Assign Credits report.

Ability to have CloudTrail Alerts sent to Lambda
A new notification method has been added to CloudTrail Alerts (which are now found within the Security > Alerts > CloudTrail menu).  You can now enter a valid Lambda function ARN on any alert, and CloudCheckr will send the full event json plus some other useful properties as a payload to the Lambda function.  This function can then be used to take automated action on the alert.
NOTE: For this feature to work “lambda:InvokeFunction” permissions must be added to credentials of this CloudCheckr account.

Redesigned the Map Overlay Report
The Map Overlay report has been redesigned, making it easier to read the map.  There are also drilldown capabilities, leading to the corresponding inventory report for the service/region selected.  This report can be found within the Inventory menu.

Multiple improvements to the Right-Sizing Report

  • Fix Now Button Added – you can now have CloudCheckr automatically stop, resize, and start your EC2 instances based on its right-sizing recommendations.
  • Network utilization added – instance network utilization metrics are now included in the utilization scoring methodology, making for more accurate recommendations.
  • PDF Export added – you can now export the list of recommendations to PDF in addition to CSV.

Historic Month Selector added to the Billing Dashboard
The Billing Dashboard, found under Cost > AWS Billing, now allows you to view the report against historic months.

Chinese Currency displayed in Mutli-Account Views of China Accounts
Multi-Account Views that are based solely on AWS Accounts running within the China region can now have their cost report displaying the proper currency.

New Dashboard Pane – Cost by Service Over Time


September 06, 2016

CloudCheckr will be performing a scheduled system update on Tuesday, September 06, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

New Best Practice Report Dashboard View
In addition to the ‘classic’ view, you can now also view your Best Practice report in a dashboard view. To enable this new view, load the report and in the help text at the top of the page enable the new setting. You can toggle between the classic and dashboard view whenever you’d like.

Added ability to let users select tags for Copy DBR
When configuring a DBR Copy you now have the ability to have CloudCheckr pass through all tags, in-use tags, or user-selected tags when building the copy of the detailed billing report. When selecting the tags the columns will be build in the DBR copy whether there is costs or not.

Added ability to bulk add and edit users
Adding and editing users can both be executed in bulk now. For adding, populate the email field with a comma separated list of users to add. When editing, use the checkboxes on the manage users screen to select the users you would like to edit. Whatever user level, account/report access provided in the form will be applied to all users being added or edited. NOTE: managing users is only available for Admin CloudCheckr users.

Added additional EBS Volume details
Additional data points, including the encrypted attribute, to the List of EBS Volumes report. This report can be found under Inventory > EC2 > EBS.

Added RDS to the RI Savings Report
In addition to EC2, you can now run the RI Historical Savings report against your RDS reserved instances. This report shows you how much you saved by running an instance with reserved pricing as opposed to On-Demand.

Added new EC2 Right Sizing Report
This new report will look at all available CloudWatch metrics and make instance re-sizing recommendations based on usage. Each instance will be given a score based on the collected CloudWatch metrics. Low scores indicate that an instance is under-utilized, high scores indicate that an instance is over-utilized. This report can be found under the Utilization menu.

3 usability updates to the Advanced Grouping report

  • Added ability to filter by resource ID
  • Added option to display/hide items with zero cost
  • Added option to include/exclude chart data in CSV export

Added CSV Export to the IAM Admin Users report
A CSV export has been added to the IAM Admin Users report. This report can be found within the Security menu.

Added ability to filter the EC2 Instance History by Time report by hours
You can now filter the list of running EC2 instances based on hours running within the EC2 Instance History by Time report. This report can be found within the Inventory > Trending menu.

Added many new Dashboard panes
Several new panes have been added to the account dashboard, including CPU Utilization, Cost Savings, and S3 utilization.

Added ability to edit Dashboard panes
You can now edit already-added Dashboard panes by clicking on the Edit icon in the top-right of the pane.

2 new API Calls

  • get_account_email_settings
  • get_account_family_v2

3 new Best Practice checks

  • Unused CloudWatch Alarms
  • IAM Admin Users Not Attested
  • New IAM Admin Users Not Attested

July 29, 2016

CloudCheckr will be performing a scheduled system update on Friday, July 29, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Can now setup Copy DBR by Account Family
In addition to having the ability to have CloudCheckr deliver DBR copies for each individual payee, you can now configure an account family to deliver a DBR copy for the entire family.

Can automatically create a MAV based on an Account Family
When creating or editing an Account Family you now have the ability to have CloudCheckr automatically create a multi-account view made up of the accounts that are part of the Account Family. This setting is configured within the Customer Information section of the Account Families page.

Added RI Purchase Recommendations by Account Family MAV
When create a multi-account view based on an Account Family, CloudCheckr will build RI Purchase Recommendations based on the usage within that family. NOTE: These reports are only available in MAVs tied to an Account Family.

Better visibility into accounts within Account Families
The top of the Account Families page now has a summary table showing the total number of AWS accounts, the total number of Account Families, and the total number of AWS accounts that are not part of an Account Family.

Can now copy the full consolidated DBR
In consolidated payer accounts within CloudCheckr, you now have the ability to have CloudCheckr deliver a copy of the full consolidated DBR to a user-defined S3 bucket. This is configured within the Cost > AWS Partner Tools > DBR > Copy menu.

Can create custom billing charges based on tags
Within the Cost > AWS Partner Tools > Invoice > Custom Billing Charges menu, when using the ‘Add a percent discount or premium for all charges’ option, you can create these custom charges based on tags.

Can select start date for custom billing charges
All custom billing charges allow you to choose the start date for when the custom charges should start being applied to the account.

Added new Cost Alert based on percentages
Within the Alerts > Cost menu, there is now the ability to create a cost alert based on cost fluctuations, instead of by budget. This alert will look at the cost over a user-defined period of time and compares that against the average costs over a previous period of time to find fluctuations.

Added Invoice ID field to invoices
There is now a dedicated Invoice ID field that can be added to invoices. This setting is configured within the Customer Information section of the Account Families page.

Added Due Date to schedule invoices
You can now define a due date on scheduled invoices created within the Invoice Generator.

New Reserved Instance Lifecycle Monitoring Report
Under Cost > Reserved Usage there is a new report named Reserved Instance Lifecycle Monitoring. This report allows you to setup email notifications for any of the various RI-related best practice checks.

Added ‘NOT in this selection’ to the Advanced Grouping report
The Advanced Grouping report now gives you the ability to create filters that will find items that are NOT selected. Previously you could only build reports against selected items.

Added pie chart option to the Advanced Grouping report
Pie charts were added as a chart type option to the Advanced Grouping report.

Added ELBs to Tagged/Untagged Resources Reports
Both the Tagged and Untagged Resources reports, found under the Inventory menu, will report against Elastic Load Balancers.

Account name character limit increased to 256 characters
Previously, accounts added to CloudCheckr needed to have a name that was 30 characters or less. That limit has been increased to 256 characters.

Added 5 new Dashboard panes

  • Cost Savings
  • EC2 CPU Utilization
  • EBS Storage
  • Cost Trending
  • Number of EC2 Instances

Added 5 new API calls

  • get_account_family
  • modify_account_family_copy_dbr
  • get_detailed_billing_with_grouping_v2
  • get_billing_dashboard_v2
  • get_users_v2

June 23, 2016

CloudCheckr will be performing a scheduled system update on Thursday, June 23, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

New S3 Encryption Details Report
The S3 Encryption Details report will scan your S3 buckets to find the total number of encrypted, and unencrypted objects being stored. You are able to run a scan against whichever buckets you want, on-demand. This report is found under the Security module.

edit_credentials API call now supports cross-account roles
When executing the edit_credentials API call, CloudChecck will now accept cross-account role ARNs for the new credentials.

Improvements to the RI Rebalancer report
Several enhancements have been made the RI Rebalancer report and functionality.

Reload DBR can now reprocess months on-demand
A Run Billing Update Now button has been added to the Reload Detailed Billing Report screen. This allows you to force CloudCheckr to reprocess the months designed for reprocessing instead of waiting for the next scheduled update.

Improvements to the RI Historical Savings report
Better month filtering and the Upfront Amortized Costs have been added to the RI Historical Savings report. This report can be found under Cost > Reserved Usage menu.

Policy JSON added to the IAM List of Policies report
You can now see the raw JSON for the policy within the IAM List of Policies report. This can be found within the Inventory > IAM > List of Policies menu.

Improved detection for unused groups for the Cleanup Security Groups task
The Cleanup Security Groups Automation task has been enhanced to provide better validation when building its list of unused Security Groups.

Improved the date search within Search Tags
The Search Tags report, found under Cost > Tags, will has a column listing the last time the tag was found in the data, as well as a search against this value.

 


June 06, 2016

CloudCheckr will be performing a scheduled system update on Monday, June 06, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added alert to detect new tag values within user-define tag keys
There is a new Alert within the Alerts > Cost menu that will notify you if a new tag value is discovered within a user-define tag key. This lets you know if new customers, applications, environments, etc., are being added to your AWS account.

Exported invoices will be saved in Invoice Generator for future retrieval
When you export an invoice CloudCheckr will now retain a copy of that invoice within the Invoice Generator, which can be exported at any point in the future.

Added exports to Route53 Inventory reporting
The Inventory > Route53 reports have been updated with export options.

Added an RI Rebalancer to modify unused reserved instances
CloudCheckr has added a Reserved Instance Rebalancer. This report will find all of your unused EC2 RIs and make a recommendation as to what you can modify to take full advantage of the reservation. There is a ‘Fix’ button which will have CloudCheckr make the Modify RI request on your behalf.

Assign Credits report has a condensed option for easier credit management
The Assign Credits report, within the AWS Partner Tools menu, now has a condensed view, making it easier to assign/apply credits that have been split up amongst several different AWS accounts.

Dashboard management has been redesigned
The CloudCheckr dashboard has been updated to make managing several dashboards easier.

Users can now choose their default dashboards to always display
Within the Dashboards, you can now select up to 5 “default” dashboards which will always display when logging into your CloudCheckr account (your other dashboards will be accessible via the ‘Select Dashboard’ dropdown). You can make a dashboard a “default” dashboard by loading it and navigating to Dashboard Actions > Configure Dashboard.

Added warning to the Invoice Generator for when the month isn’t finalized
CloudCheckr will now warn you if you are trying to export an invoice before the month’s data has been finalized and fully loaded into CloudCheckr.

Added notification email to the Invoice Generator to notify when month is finalized
Within the Invoice Generator there is now a button labeled ‘Email’. If you configure this option, CloudCheckr will send you an alert email once the previous month’s billing data been finalized and fully loaded into CloudCheckr.

Added wildcard functionality to CloudTrail Alert ignores
You can now add an asterisk (*) to CloudTrail Alert ignores to act as a wildcard. This allows you to create ignores such as “arn:aws:iam::12345678:user/awseb*” where automated activity adds new IAM users with the same format, that you want to keep from your alerts.

Added additional data to the SES Summary Inventory report
Additional data and charts have been added to the Inventory > SES > Summary report, including Rejected Emails, Bounced Emails, Complaints, and Delivered Emails.

Added saved filters to the EC2 Instance History Trending reports
You can now save your filter and group options within the Inventory > Trending > EC2 > Instance History reports.

Added the Marketplace report data the Copy DBR
The AWS Marketplace billing report will now also be copied when using the Copy DBR feature.

Improved the CSV export for the Historical Billing Summary report
The CSV export from the Cost > AWS Billing > Summary Reports > Historical has been updated to include the by-Service data.

Added a date filter to the Search Tags report
The Search Tags report, located within Cost > AWS Billing > Tags, now has a date range filter.

Added ‘Match Resources Without Key’ functionality to Tag Mapping
This new Tag Mapping function allows you to specify a specific tag key and automatically map costs that do not have that tag key applied. To utilize this feature you will need to select the ‘Match Resources Without Key’ checkbox in the Tag Mapping report.

Added filtering & scheduling capabilities to the Automation Tasks
Filtering options have been added to the Automation Tasks to make it easier to identify the specific resource you would like to take actions against. You are also now able to configure when, and how frequently your Automation Tasks run.

Added 5 new Best Practice checks

  • Deprecated Oracle Version
  • Publicly Accessible Redshift Clusters With Open Security Group
  • Publicly Accessible RDS DB Instances With Open Security Group
  • S3 Buckets Not Utilizing Network Encryption
  • S3 Buckets Not Utilizing KMS Keys For Encryption

Added 3 new API Calls

  • get_cloudtrail_custom_metric
  • get_resources_route53_hostedzone_details
  • get_resources_route53_healthcheck_details

May 09, 2016

CloudCheckr will be performing a scheduled system update on Monday, May 09, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added Automation Capabilities
Three different automation tasks have been added to CloudCheckr, which will allow you to remove unused resources from your AWS account:

  1. Cleanup Security Groups
    CloudCheckr will detect security groups that are not assigned to any resources and will purge those security groups for you.
    Cleanup Security Groups requires the following IAM permission: “ec2:DeleteSecurityGroup”
  2. Cleanup EBS Volumes
    CloudCheckr will detect Volumes that are older than 4 weeks with a Status that is not “In-Use” and purge those Volumes for you.
    Cleanup Volumes requires the following IAM permission: “ec2:DeleteVolume”
  3. Cleanup Snapshots
    CloudCheckr will detect Snapshots that are older than 8 weeks and purge those Snapshots for you.
    Cleanup Snapshots requires the following IAM permission: “ec2:DeleteSnapshot”

NOTE: You have the option to manually run these tasks yourself, or have CloudCheckr run these automatically.  CloudCheckr will not automatically cleanup any resources unless you explicitly configure the tasks to do so.  If you do not add the delete permissions to your IAM policy, CloudCheckr will not be able to run the tasks manually or automatically.

More control over RI unsharing
There are now multiple options to help you control how CloudCheckr handles RI unsharing with List Cost. In addition to enabling or disabling the feature, you can now choose to unshare RIs for specific AWS accounts, or to have CloudCheckr pass through the Unblended RI costs when credentials are missing for a payee. This can be manage within the Cost > AWS Partner Tools > Invoice > Configure Custom Cost menu.

Added All Payee option to Payee Support Charges
The Payee Support Charges screen now has an “Apply to all payees” button which will have this setting apply to all current, and future payee accounts. This can be manage within the Cost > AWS Partner Tools > Invoice > Payee Support Charges menu.

Added Cost Forecast pane to Dashboard
The Dashboard now has a “Cost Forecast” pane type.

New RI Cost Savings report
A new Reserved Instance Cost Savings report has been added to the Cost > Reserved Usage menu. This report shows you how much you saved by running an instance with reserved pricing as opposed to On-Demand.

New RI Modifications report
The EC2 Reserved Instance Modifications report provides you with a history of the reserved instances you’ve owned that have been modified. It shows you the RI’s original state as well as the new state post-modification. This report can be accessed within the Cost > Reserved Usage > EC2 menu.

New CloudWatch Logs Summary report
The new CloudWatch Logs Summary report provides an overview of the CloudWatch Log Events for the day. This report can be accessed within the Security > CloudWatch Logs menu.

New IAM Admin Users Report
The IAM Admin Users report provides you with a complete list of IAM users that have any administrative permission (such as iam:CreateUser, iam:CreateAccessKey, iam:ChangePassword, etc.). In addition to details about the IAM user, you also have the ability to “attest to” the users, validating whether they should have these permissions or not.

Added Direct Connect Alert
The new Direct Connect alert will check the Direct Connect service every 5 minutes, alerting you with any Direct Connection with a ‘Down’ state is found. This alert can be configured within the Alerts > Utilization menu.

Added Security Group changes Alert
The new Security Group changes alert will alert you if any modifications are made to any security groups, including groups being added or deleted. This alert can be configured within the Alerts > Utilization menu.

Single Day Summary report link to Advanced Grouping
The list of services within the Single Day Summary report, found under Cost > AWS Billing > Summary, will link you directly to the Advanced Grouping report. This is useful in the scenario where you see an unusual number and would like more information. The Advanced Grouping report will be configured to group by Description, filtered to the service and day in question. You simply need to click the Filter button to retrieve the data.

Redesigned Map Overlay and added to MAV
The Map Overlay report has been redesigned to better display the per-region information. This report has also been added to multi-account views and can be found under the Inventory menu.

Added bar and column chart options to Advanced Grouping report
The Advanced Grouping report now has a Chart Type option, where you can choose to display an Area, Bar, or Column chart in your returned data.

Added Summary grouping options to Invoice Generator
Additional grouping options have been added to the Summary invoice within the Invoice Generator. You can now build a Summary invoice that is grouped by Service, Region, or Service and Region.

New API Call to see Alerts Configured
A new API call has been added (alert/get_alerts) that will retrieve the list of configured alerts within an account.

Added throttled events DynamoDB Right Sizing report
The DynamoDB Right Sizing report will now report against the number of throttled events within each DynamoDB table. This report can be found under the Utilization > DynamoDB menu.

Added PDF export to DynamoDB Right Sizing report
The DynamoDB Right Sizing report now has a PDF export button in the top-right of the report.

Added additional notification methods for Best Practice checks
In addition to email, when configuring the notification method for individual Best Practice checks, you can now have your notifications delivered to a Slack channel or to Syslog. These options are managed, per check, within the Best Practice report.

10 New Best Practice Checks

  • S3 Bucket Access Granted To User In A Different AWS Account
  • SQS Queue Access Granted To User In A Different AWS Account
  • IAM Admin User Password Changed
  • Enforce SSL connections
  • Load Balancers Without Access Log Enabled
  • IAM Admin Users Not Utilizing Multi-Factor Authentication
  • New IAM Admin Users Created Or Granted
  • New Access Key(s) Created for IAM User(s)
  • CloudTrail Aggregate Buckets Not Set To Read-Only
  • IAM Admin User Login

April 11, 2016

CloudCheckr will be performing a scheduled system update on Monday, April 11, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

IMPORTANT: Moved Customers from Invoice Generator to Account Families
The Manage Customers tab in the invoice generator has been moved to the AWS Partner Tools > Account Families page. The same functionality exists here, and changes made to Account Families will carry over to the invoice generator.

Added Dashboards to accounts
You now have the ability to create Dashboards around items such as Cost, EC2 Instance Inventory, and Best Practice Checks. When you login to your CloudCheckr account you will see a “+ New Dashboard” button. Click that to get started.

Added ability to ingest custom CloudWatch metrics
CloudCheckr can now ingest on your custom CloudWatch metrics, including memory utilization. These can be enabled/managed within the Utilization > Manage Custom Metrics.
NOTE: You can currently view these metrics within the CloudWatch Historical Export report. They will be added to additional reports with upcoming updates.

Ability to create RDS custom Inventory reports
In addition to EC2, S3, and Workspaces, you can now also create and save custom inventory reports for the RDS service. These reports can be built within the Inventory > Custom Reports > Builder report.

Redesigned the Daily CloudTrail Summary email
The Daily CloudTrail Summary email has been given an update, making it easier to read and understand the data.

New Best Practice Report email frequency delivery settings
In addition to receiving a daily Best Practice email report, you can now choose the frequency of the emails, as well as which day(s) they are delivered. This can be managed within the Settings > Email Settings page.

Added Trusted Advisor option to Best Practice email settings
Within the Settings > Email Settings page you can also choose to include Trusted Advisor checks in the best practice email.

Added wildcard capabilities to Search Tags report
Tags within the Cost > Tags > Search Tags report can now be searched using partial matches.

7 New Security > VPC Reports
Within the Security > VPC menu you will now find reports for:

  • Endpoints
  • Route Tables
  • Virtual Private Gateways
  • NAT Gateways
  • Customer Gateways
  • VPN Gateways
  • Internet Gateways

Added rules to Assign Credits
You can new create rules around assigning credits in order to help you automate their allocation within the Cost > AWS Partner Tools > Invoice > Assign Credits report. These rules are created using Regular Expressions, and they will apply to new credits only.

2 new IAM Inventory reports
Under the Inventory > IAM menu you’ll now see reports for:

  • List of Open ID Connect Providers
  • List of SAML Providers

Added weekly and monthly options to Custom Report emails
In addition to receiving the custom report emails on a daily basis, you can now also receive those on a weekly or monthly basis.

5 new Built-In CloudTrail Alerts

  • New User detected in CloudTrail
  • New IP Address detected in CloudTrail
  • New Event type detected in CloudTrail
  • New Region used
  • New Service used

Added Marketplace report to Export DBR
The Cost > AWS Billing > Other Features > Export DBR report now gives you the option to also export the Marketplace billing report from the account (if one exists).

Added Group By Account option to Savings report in MAVs
When looking at the Savings report in a multi-account view, you now have the option to group the report by Account or by best practice checks.

New CloudWatch app for Splunk
CloudCheckr now offers an app for Splunk, which will allow Splunk to read data from CloudCheckr.

Added 4 new API calls

  • edit_account_email_settings
  • edit_credential
  • copy_user
  • get_cost_saving

March 22, 2016

CloudCheckr will be performing a scheduled system update on Tuesday, March 22, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Payee Support Charge can now be 10% (no $100 minimum)
When configuring Payee Support Charge you now have the option to choose whether to enforce a $100 minimum fee or not. If this option is enabled, and the payee total cost is less than $10k for the month, the payee support charge will be a strict 10% of monthly AWS costs. If the option is disabled, and the payee total cost is less than $10k for the month, the payee support charge will be $100 or 10%, whichever is highest.

Ability to filter payees in Savings Analysis report
In the Savings Analysis report, you now have the ability to filter out whichever payees you’d like from the report’s savings calculations. This allows you to filter out internal accounts, for example, so that your reporting can be more accurate.

Removed items with 0 usage from EC2 Spend Analysis Cost Details report
The EC2 Spend Analysis Cost Details report (found under Cost > Spend Analysis) will no longer display data points where this is no cost or usage.

New Custom Cost options to define “List Cost”
AWS Partners can now define what “List Cost” means within the Cost > AWS Partner Tools > Custom Cost page. You can choose whether to set the cost baseline to Blended or Unblended, and choose whether RI sharing and/or shared tiering discounts are applied.

Added Summary information to EC2 Custom Report emails
EC2 Custom Inventory Report emails will now have a summary table at the top, showing the total cost.

Custom Charges can now be created against items “NOT in this selection”
When creating custom charges within the Cost > AWS Partner Tools > Custom Charge menu, you now have the ability to set those against items NOT in the selection.

3 New Best Practice Checks

  • Blocklisted IP Address Making API Calls
  • Console Logins From Blocked IP Addresses
  • Blocklisted IP In AWS Infrastructure

March 11, 2016

CloudCheckr will be performing a scheduled system update on Friday, March 11, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added CloudWatch Log daily summary emails
You can now configure daily summary emails from your CloudWatch log evens within the Security > CloudWatch Logs > Define Events. These emails can be configured on the Summary Report tab.

Added 12 new built-in events to CloudWatch Logs
12 new built-in events have been added to the Security > CloudWatch Logs > Define Events report.

CloudWatch Logs reports added to multi-account views
CloudWatch Log events from general accounts will rollup and be viewable when looking at multi-account views.

CloudWatch Logs Define Events now has a resource ID parameter
When configuring your CloudWatch Log events you will now have the option to add a resource ID parameter.

Added threshold to fire in CloudWatch Logs Events
When configuring your CloudWatch Log Events you can now set a threshold to fire, dictating how many events need to occur before the event is saved.

Added configuration to “Unused WorkSpace(s)” check to set number of days
The “Unused WorkSpace(s)” best practice check has a new configuration option, allowing you to set how the number of days the check looks for unused workspaces to report against.

Added Redshift Spend Analysis Reports
Under Cost > Spend Analysis > Redshift you will now see a Summary and Details report.

Added Direct Connect inventory reports to multi-account views
In multi-account views you will now find Direct Connect reports under Inventory.

Monthly Billing Summary – added By Service grouping option

Added S3 bucket policy to List of S3 bucket CSV Export
CloudCheckr will now grab your S3 bucket policy, which you can view by exporting, to CSV, from the Inventory > S3 > List of Buckets report.

CloudTrail Alerts can be configured to only trigger when new parameters are discovered
CloudTrail Alerts have a new option that allows you to only have an alert triggered when a new parameter is detected. This allows you to be notified when an event from a new IP, User, Region, etc., is captured by CloudTrail.

CloudTrail Alerts can be configured to trigger without saving results in CloudCheckr
In the CloudTrail Alert Builder you will now have an option to not save the results for the triggered alert in CloudCheckr. This is useful if you are having the alert results delivered to SysLog.

Reorganized the AWS Partner Tools navigation
The Cost > AWS Partner Tools menu has been organized by report type to make it easier to find the features and reports you need.

Added the ability to suppress the due date in invoice generator
The Create Invoice tag of the Invoice Generator now has a checkbox that allows you to suppress the due date from the invoice output.

Added the ability to create custom charges against not-selected AWS services
When creating custom charges within the Cost > AWS Partner Tools > Invoice menu, you can now choose to create custom charges against selected services, or services that are not selected.

New Best Practice Check: S3 Buckets Without Encryption Policy


February 29, 2016

CloudCheckr will be performing a scheduled system update on Monday, February 29, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added Summary and Detail VPC Peering Connection reports
Under the Security > VPC menu you’ll now see a Summary and Detailed report for VPC Peering Connections.
NOTE: For CloudCheckr to be able to report on this data, you must have "ec2:DescribeVpcPeeringConnections", permissions in your CloudCheckr IAM policy. If you are using the default AWS Read Only policy, this is already included and you won’t need to make any changes.

Added the ability to modify usage rates for custom charges
You can now modify the List Cost per-hour usage rate for your payees. These custom usage rates can be added and managed within the Cost > AWS Partner Tools menu.

Added Lambda Inventory reports
A Lamdba Summary and Detailed report have been added to the Inventory menu.
NOTE: For CloudCheckr to be able to report on this data, you must have "lambda:ListFunctions",, permissions in your CloudCheckr IAM policy.

Added Bucket URL to S3 List of Buckets report
Within the per-bucket details within the S3 List of Buckets report, you will now be able to see the bucket URL. If the bucket is publicly accessible, you can use this URL to access the contents within the bucket.

Added CSV export for Cost Savings report
The Cost Savings report now has a CSV export.

Added select all capabilities to Payee Support Charges
The Payee Support Charges report under the Cost > AWS Partner Tools menu now has select all checkboxes, so you no longer have to check each account individually.

Added List Cost Analysis report
A List Cost analysis report has been added, providing visibility into the modifications CloudCheckr made when calculating list cost. This can be found within the Cost > AWS Partner Tools menu.


February 19, 2016

CloudCheckr will be performing a scheduled system update on Friday, February 19, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Improved the CloudTrail Alert Builder
The UI for the CloudTrail Alert Build (both custom and built-in) has been redesigned, to make it easier to create alerts.

Added summary charts to CloudTrail Alert Results
You now have the ability to add summary charts to the CloudTrail Alert Results report. You can build charts AWS Account, IP Address, Service, etc.

Tweaked CloudTrail Alert emails
Minor updates to the CloudTrail Alert emails to make them easier to read.

Added new DynamoDB Reserved Capacity Summary report
The DynamoDB Reserved Capacity Summary report provides high-level details about the reserved capacity purchased for the DynamoDB service. This report can be found under the Cost > Reserved Usage > DynamoDB menu.

Added new DynamoDB List of Reserved Capacity report
The DynamoDB List of Reserved Capacity report provides details about the reserved capacity purchased for the DynamoDB service. This report can be found under the Cost > Reserved Usage > DynamoDB menu.

Added new DynamoDB Reserved Usage Report
The DynamoDB Reserved Usage report gives visibility into the amount of Reserved Capacity purchased, used, and provisioned, as well as the amount of capacity that is On-Demand. This report can be found under the Cost > Reserved Usage > DynamoDB menu.

Added additional details to Reload DBR
The Reload DBR screen now shows the status of the months being reloaded, as well as the Start and End time for the updates. This page is found under the Cost > AWS Partner Tools menu.

Added ability to Suppress AWS Support in Payee Support Charges
The Payee Support Charges screen now has a second checkbox to have CloudCheckr suppress AWS Support Charges being written to the account if you want to use the CloudCheckr Payee Support Charge feature. This ensures the accounts do not get double-billed for support.

Added Exports to the Cost Savings report
The Cost Savings report now has a PDF export.

Added additional grouping options to Monthly Summary Report
Under Cost > Summary Reports > Monthly, you now have the ability to group the data by Account, by Account / Service, or by Day / Service.

Added ability to add monthly custom charges by service
You can now have custom monthly charges applied to specific AWS services (whereas before they were against the entire account). These can be added/managed under the Cost > AWS Partner Tools menu.

Added Slack and Syslog integration into CloudWatch Logs
You can now have your CloudWatch Logs Events delivered to a Slack Channel or to Syslog. You can set these up under Security > CloudWatch Logs.

Added instance ID to CloudWatch Logs raw data
The raw data in the CloudWatch Logs results not includes instance ID(s).

Added check Ids to the output of the “get_best_practices” API call
The output for the “get_best_practices” API call will now include XXX


January 22, 2016

CloudCheckr will be performing a scheduled system update on Friday, January 22, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Enhancements to CloudTrail Alerts:
-Added ability to deliver notifications to Slack and Syslog: You can now have your CloudTrail alerts delivered to a Slack Channel or Syslog Host.
-Added new Response Type to differentiate between Errors and Unauthorized Access Attempts

New Cost Dashboard report
This new Cost Dashboard report, which will be listed under the Cost > AWS Billing menu, will display graphs showing spend summary and a cost breakdown by service.

Added ability to choose which credits to funnel to payee accounts
In payer accounts, within the Cost > AWS Partner Tools > Assign Credits page, you can choose to assign credits to payees, as well as choose whether the credits should funnel down to the payee account reports.

Added ability to view custom charges in payee summary reports
Custom charges added in the Cost > AWS Partner Tools > Custom Billing Charge menu will not display in the payee account’s summary reports.

Added new DynamoDB right-sizing report
This new report recommends the proper number of provisioned reads and writes for each of your DynamoDB tables, based on their consumed usage. This report can be found under Utilization > DynamoDB.

Added support for aggregated AWS Config buckets
CloudCheckr now support AWS Config logs being stored in aggregated S3 buckets. These must be setup within multi-account views in CloudCheckr, under the Security > AWS Config > Aggregated S3 Buckets > Configure.

Added ability to add payee accounts without credentials to populate cost reports
When configuring new accounts in CloudCheckr, you will now see a third option named “Map to Payer”. This option allows you to add a payee account without connecting the account to AWS (as long as the payer is already added to CloudCheckr). CloudCheckr will build the payee account cost reports only, allowing you to grant access to payees to manage their costs without asking them to hand over AWS credentials. If you would like additional security and inventory reporting credentials can be added to this account at any time.

Added reset password email link to the list of users page
When editing users, CloudCheckr Administrators now have the ability to automatically email someone a forgot password link.

ElastiCache & Redshift List of Reserved Instances report now looks across consolidated accounts
Both ElastiCache and Redshift List of Reserved Instances reports will display purchased RIs across all consolidated accounts, when looking at the report at the master payer level (as long as the payees have been added into CloudCheckr). You can find these reports under Cost > Reserved Usage > ElastiCache & Redshift.

Invoice Generator description text now honors hard line breaks
When adding descriptions to the Invoice using the Invoice Generator, line breaks will be properly reflected in the output.

Added Cost Savings report to multi-account views
The Cost Savings report has now been added to multi-account views. You will find this report above Best Practices in the report navigation.

2 new API calls
These new calls allow you to add or delete account-level tags to be used with multi-account views:

  • account/add_tag
  • account/delete_tag

New Best Practice Check: EC2 Reserved Instances With Unused Hours


January 05, 2016

CloudCheckr will be performing a scheduled system update on Tuesday, January 05, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

The color of the app’s green bar can now be customized
Within the Settings menu at the top of the CloudCheckr app you can now control the color of the green bar that spans the app.

Added tags to API call get_resources_ec2_load_balancer_details
The output from the inventory.xml/get_resources_ec2_load_balancer_details API call will now include the resource tags for the ELBs.

Added Committed Amount to EC2 RI Purchase (Frequency) report
The EC2 Reserved Instance Purchase Recommendation (by Frequency) report will now show the total committed amount for the recommendations. You can find this report within the Cost > Reserved Usage > EC2 menu.

Improvements to the Idle DynamoDB Tables best practice check
The Idle DynamoDB Tables best practice check will now clearly show the provisioned/consumed/utilized percentage details for both reads and writes for each “idle” table.

Ordered the filters and columns in the EC2 and RDS List of RIs reports
The columns in List of Reserved Instances reports, for both EC2 and RDS, have been reordered to make it easier to read and understand the report.

Custom Charges can be added against List or Unblended totals
When adding custom charges based on percentage (under Cost > AWS Partner Tools > Custom Charges), you now have the option to have those charges based off of the Unblended total or the List Cost total.


December 17, 2015

CloudCheckr will be performing a scheduled system update on Thursday, December 17, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

New Cost Savings report
The Cost Savings report (BETA version) is designed to demonstrate the possible savings by following the Best Practice report for Cost.  You can find this report at the top of the report navigation, above the Best Practice report.

Enhancements to Custom Billing Charges
You now have 3 separate options when adding Custom Billing Charges into CloudCheckr.

  • Add a percent discount or premium for all charges – modifies each individual charge in the Detailed Billing Report by a specific percent.
  • Add a monthly percent charge or credit – creates an additional single charge or credit in the Detailed Billing Report that is a specific percent of the monthly bill.  NOTE: This also allows you to create charge and/or credit tiers.
  • Add a fixed charge or credit – creates an additional single charge or credit in the Detailed Billing Report that is a specific amount.

You can manage your Custom Billing charges under the Cost > AWS Partner Tools menu.

Advanced Grouping Report – Include Untagged no longer relies on saved filters
Moving forward the ‘Include untagged items’ check box can now be used without the need of a saved filter.

New Relic Plugin Re-Enabled
The New Relic Plugin has been corrected and re-enabled.  This can be managed within the Settings > Plugin for New Relic menu within each account.

Added Inventory reports for CloudHSM
Added Summary and Details reports for CloudHSM, which can be found under the Inventory menu.

Added Inventory reports for EC2 Container Service
Added Summary and Details reports for EC2 Container Service, which can be found under the Inventory menu.

Display/Export tags update
We will now display and export Resource Tags for the following reports, which can be found within the Inventory > EC2 menu.

  • List of EBS Volumes
  • List of EBS Snapshots
  • List of EC2 Load Balancers

Added CloudTrail Summary Report for Aggregated Multi-Account Views
If you have a multi-account view in CloudCheckr configured to pull in aggregated CloudTrail logs, CloudCheckr will build a CloudTrail Summary report based on that aggregated data.  You can view this within your multi-account view within the Security > CloudTrail > Aggregate menu.

Multi-Account View CloudTrail Alerts Will Run in Tagged Accounts
If you create CloudTrail alerts within the Alerts > CloudTrail menu in a multi-account view, CloudCheckr will run those alerts within each account that is part of that multi-account view.  This will allow you to create a single alert that can run in multiple accounts (preventing you from having to create an alert in each account).

AWS Config reports exports
We have added the ability to export to CSV/PDF for Security > AWS Config > Resource Changes and Configuration History reports.

New accounts will no longer default to Payer
If we do not have credentials or have not yet identified if a newly added account is a Payer or Payee we will default the type to be Unknown.

Added CSV export to the CloudTrail Alerts screen

Redesigned the CloudTrail List of Trails report
The CloudTrail List of Trails report will now display in grid format.  Filtering and column options have also been added to the report.

Added Ignore Capabilities to CloudTrail Alerts
You can now ignore certain parameters of CloudTrail Alerts to help you eliminate noise and only receive the alerts that are important to you.   You can ignore regions, IAM users, events, and/or IP Addresses for each alert.  You will get a link in each CloudTrail Alert email to manage these.  They can also be managed within the Alerts > CloudTrail > Manage screen, at the bottom of each alert.

Improved the AWS Credits Summary Report and Export
AWS Account ID has been added to this report and export.

Improved Savings Analysis Report
We have removed the cost type drop down and will now display Savings Analysis based on List and Unblended cost only.  We have also added an additional Net Savings column.

Improved Perimeter Assessment Export

API Updates

  • new: method: add_accountV2 – This will return the Id of the created account
  • new parameter: use_cc_account_id – can be used in place of the parameter use_account

1 New Best Practice Checks

  • Previous Generation Redshift Node Should Be Migrated


November 24, 2015

CloudCheckr will be performing a scheduled system update on Tuesday, November 24, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Consolidated CloudTrail Alert Emails
CloudCheckr will now consolidate the events from each CloudTrail alert into a single email, showing a maximum of 15 events, every 15 minutes per alert. Previously, each event would be sent in a single email. This will allow you to still be notified immediately if an important event occurs within your AWS account, but drastically cut down on the number of emails you receive from CloudCheckr.

Added additional functionality to Custom Billing Charges
When adding a new Custom Billing Charge you now have the ability to add percent increase/decreases, as well as have recurring monthly charges. Custom Billing Charges can be managed within the Cost > AWS Partner Tools menu.

Added DNS resolution & DNS hostnames to VPC Report
There are now two new columns added to the Security > VPC > List of VPCs report showing DNS resolution and DNS hostnames.
IMPORTANT: you must include “ec2:DescribeVpcAttribute” in your IAM policy for CloudCheckr to report on these values.

Payee List Cost Accounts
When designating an account as a List Cost Payee CloudCheckr will ensure that all costs shown in the account, including bill emails and alerts, are based on List Cost. You can choose which accounts to set as Payee List Cost Accounts within the Cost > AWS Partner Tools menu.


October 26, 2015

CloudCheckr will be performing a scheduled system update on Monday, October 26, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Re-organized the Alert menu for better usability
The Alert menu has been separated into Cost, Utilization, and CloudTrail alert subcategories. Each will now have a Manager and Results screen. The Manager is where you can create new alerts as well as manage those you have already-created. The Results page is where you can see the results for related triggered alerts.

Will now recognize new payee accounts quickly
When adding new payee accounts into CloudCheckr, it will now try to verify, upon creation, whether it is a payee of an already-added payer account. This will allow the payee/payer relationship to be reflected quickly on the list of accounts page.

Redesigned the configure CloudTrail Aggregate page
CloudCheckr allows you to add your aggregated CloudTrail buckets to multi-account views within the Security > CloudTrail > Aggregated S3 Buckets > Configure menu. This configuration page has been completely redesigned to make it easier to add and manage your aggregated buckets.

Added summary details to the List of RDS Reserved DB Instances report
The List of RDS Reserved DB Instances, found under the Cost > Reserved Usage > RDS menu, now has a summary table.

Added the ability to edit your own CloudCheckr user
Administrative users can now manage their own CloudCheckr login from the users page. This allows you to manage whether your login can authenticate using SSO and/or CloudCheckr.

Added CSV Export to the Tagging Rules report
A CSV export has been added to the Tagging Rules report, allowing you to pull out your list of already-created alerts. This can be found under the Cost > Tags > Tagging Rules.

Added Build Summary Chart functionality to List of RDS DB Instances report
Within the Inventory > RDS > List of RDS DB Instances report you can now build summary charts in the report.

Added Total Instances Unused column to List of EC2 Reserved Instances report
A new column has been added to the List of EC2 Reserved Instances report, allowing you to quickly identify the number of unused reserved instances for each of your purchased RIs. You can find this report under Cost > Reserved Usage > EC2.

Improved CSV export for the List of EC2 Reserved Instances report
The CSV export from the List of EC2 Reserved Instances report will now make it easier to identify the instances CloudCheckr has identified as matches for your reservations.

Improved the List of IAM Users CSV export
The CSV export from the Inventory > List of IAM Users report will now include the credentials report information.

2 New API Calls

  • get_detailed_billing_file
  • add_mav_account

2 New Best Practice Checks

  • Allow Users To Change Their Own Password
  • Convert to RDS SQL Server Web Edition

September 28, 2015

CloudCheckr will be performing a scheduled system update on Monday, September 28, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added the ability to filter CloudTrail Alerts by Response and/or Request Parameters
When creating or enabling CloudTrail alerts within the Alert > CloudTrail menu, you know how the option to filter these alerts by their response and/or request parameters. This allows you a further level of alert filtering beyond just the CloudTrail event name.

Added the ability to ignore Amazon IP Addresses in CloudTrail Alerts
You now have the ability to completely ignore any events originating from Amazon IP Addresses when creating or enabling CloudTrail alerts. This is especially helpful for alerts that track Root account usage, as you can now fully eliminate being alerted by Amazon system activity.

New RDS RI Purchase Recommendation report for Current Gen pricing
Within the Cost > Reserved Usage > RDS menu, you’ll see the new Purchase (Current Gen) report. This report is designed to provide RDS RI Purchase Recommendations using the new Partial, No Upfront, and All Upfront payment options.

New RDS Comparison Detail report
Also within the Cost > Reserved Usage > RDS menu, you’ll see a Comparison Detail (Current Gen) report. This report shows you the various pricing options offered by Amazon for each of your running RDS DB Instances.

Billing Data Checked dropdown will now tell you when the monthly rollover is finalized
The Billing Data Checked dropdown at the top of CloudCheckr within the green bar will now notify you when the previous month’s billing data is finalized by Amazon. For example, once the DBR is finalized and the data is fully processed by CloudCheckr you will see a message such as: September 2015 AWS Bill is finalized and fully loaded into CloudCheckr. This lets you know that you are free to run your invoicing and monthly cost reports.

Improved Improperly Tagged Resources report filtering and CSV export
The Improperly Tagged Resources report, found under the Cost > Tags menu, has seen improvements made to its date filtering options. The CSV export has also been improved, providing better data organization.

Added the ability for payer accounts to reload their DBR for any month
Users now have the ability to reload the cost data from their Detailed Billing Report (DBR) in CloudCheckr for any month, at any time. This option can been seen under the Reload DBR report within the Cost > AWS Partner Tools menu. You will see a list of each month you have a DBR available from Amazon and can choose which months you would like to reprocess.

Added the ability to create a payee DBR and deliver to a user-defined S3 bucket
In a master payer account in CloudCheckr you now have the ability to generate a Detailed Billing Report (DBR) based on a payee account’s data and have that automatically delivered to a user-defined S3 bucket. This DBR copy will be updated each time Amazon makes an update to the cost data. You can find this option within the Cost > AWS Partner Tools menu.

Added a Save as CSV button to the main list of accounts page
The main list of accounts page now has a save as CSV button which allows you to export all of your accounts into a CSV file.

Improved the CSV export of the Historic Monthly Billing Summary report
Missing data points from the Historic Monthly Billing Summary report have now been added to the CSV export.

Added Public IP Address to the New Public Resources Alert email
The New Public Resources Alert email, which can be configured within the Alerts > Builder menu, will now include the Public IP Address for the public resources.

Added additional credential details to the List of IAM Users report
The List of IAM Users report, found within the Inventory menu, will now include additional details about the IAM user’s credentials.

8 New Best Practice Checks

  • CloudTrail Include Global Services Not Enabled
  • CloudTrail Include Global Services Enabled In Multiple Regions
  • Redshift Databases Without CloudWatch Alarm For Disk Usage
  • Buckets That Allow Authenticated Users to Access CloudFront Log Files
  • Buckets That Allow Authenticated Users to Access CloudTrail Log Files
  • Buckets That Allow Authenticated Users to Access Billing Report Log Files
  • Buckets That Allow Authenticated Users to Access S3 Log Files
  • Number Of ElastiCache Clusters That Are Not Isolated Within A VPC

September 3, 2015

CloudCheckr will be performing a scheduled system update on Thursday, September 03, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Redesigned the CloudTrail Alerts Results report
The CloudTrail Alerts Results page has been redesigned, providing an easier to read layout as well as more-advanced filtering options.

Added Threshold options to CloudTrail Alerts
You now have the ability to set thresholds for your CloudTrail alerts. You can configure CloudCheckr to only send alerts when a user-defined number of events occur within a user-defined time period. This allows you to receive unauthorized console login attempts alerts when more than 5 failed logins occur over a 2 minute period (instead of receiving an email for every failed login attempt).

Added Request and Response Parameters to CloudTrail Alert emails
Emails triggered from CloudTrail Alerts will now include the Request and Response parameters from the CloudTrail log file.

Added CSV exports to these reports:

  • RDS List of Reserved Instances report in multi-account views
  • RDS Utilization Details report
  • CloudCheckr Users page
  • CloudWatch Alarms report

Marketplace Cost Summary report has been improved
A table at the top of the Marketplace Cost Summary report now shows the total Marketplace costs for the selected timeframe. This report can be found under Cost > Spend Analysis > Marketplace.

Added the ability to export the AWS Detailed Billing Report
Under the Cost > AWS Billing menu you will now see a report named “DBR Export”. This report allows you to choose any historic month that has a detailed billing report (DBR) and download that csv file directly from CloudCheckr.
NOTE: This report is currently only available to CloudCheckr admin users.

Added Subject and Description free form text boxes to the Invoice Generator
When generating invoices in CloudCheckr you now have the ability to add a subject and description to the invoice. The text you enter here will display at the top of the exported invoice. This allows you to enter invoice numbers or other text you’d like to display on the invoice.

Added filtering options to the Reserved Instance Mapping screen
The Reserved Instance Mapping report now has filtering capabilities, allowing you to narrow your list of reservations by several factors, including availability zone or instance type. This report can be found under Cost > AWS Partner Tools in master payer accounts.

Added option for proportional payee amortization
This setting, which can be managed under Settings > Detailed Billing Bucket, provides a different way to calculate amortization in CloudCheckr reports. If selected, this will multiply amortization by a proportionality of: Total Hours Running For an Account / Total Hours Running for the consolidated billing family.
NOTE: this setting will apply to all of your Accounts within CloudCheckr.

Added the ability to copy CloudTrail alerts
You can now copy the CloudCheckr pre-built CloudTrail alerts and create new alerts matching all criteria. This allows you to easily tweak or modify the parameters of the pre-built alerts (which cannot be modified). To copy an alert, find an alert you would like to copy, click on it to expand and view its details, and click the Copy button at the bottom.


August 14, 2015

CloudCheckr will be performing a scheduled system update on Friday, August 14, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added Reserved Instance Mapping
Reserved Instance Mapping allows users to assign a purchased EC2 reserved instance to a running EC2 instance. This report can be found under Cost > AWS Partner Tools will only make an impact when viewing List Cost in CloudCheckr reporting.

Added Inventory reporting for CloudWatch Alarms
CloudCheckr now offers a CloudWatch Alarm summary and details report under the Inventory menu.
NOTE: You must add “CloudWatch: DescribeAlarms” permissions to your CloudCheckr IAM policy for these reports to populate.

Added timestamp for last billing report update from AWS
At the top of your reports, where CloudCheckr shows the last time your billing data was checked, you will now be able to see the timestamp for the last time AWS updated your detailed billing reports.

Added several new built-in CloudTrail Alerts
Under Alerts > CloudTrail > Manager CloudCheckr now offers several more pre-configured CloudTrail alerting options.

Added CloudTrail Alerts to multi-account views
Your multi-account views now have an Alerts menu where you can configure CloudTrail alerts at this level. This allows you to create alerts across your aggregated CloudTrail log data.

Added Common Searches for Cost
Under the Cost > AWS Billing menu you’ll now find a Common Searches report. This allows you to quickly and easily zero in on commonly queried data sets, such as costs by account, or costs for specific services.

Added Common Searches for Security Groups
Under the Security > Security Group menu you’ll now find a Common Searches report. This report allows you to find security groups that match specific criteria, such as groups that allow database access from all IP Addresses, or groups that allow more than port 80/442 from all IP Addresses.

Added child filters to List of EC2-VPC Security Groups
The List of EC2-VPC Security Groups, found under the Security > Security Group menu, now has a child filter option which allows you to zero in on security groups that have specific configurations.

Added historic search capabilities to the Improperly Tagged Resources report
The Improperly Tagged Resources report now has a date selection option, allowing you the capability to perform historical searches on the data.

Added new filtering capabilities to the Improperly Tagged Resources report
The Improperly Tagged Resources report now allows you to filter the resources down to those that are active, inactive, or either.

Improvements to the Custom Billing Charges screen
The Custom Billing Charges screen, found under Cost > AWS Partners, has been cleaned up and simplified to make adding custom charges easier.
NOTE: Custom charges will only display when generating cost reports using List Cost.

Improved CSV exports from the Security Permissions report
CSV exports from the Security Permissions report now include the name of the resource in the export title and will contain IAM information when exporting S3 buckets. This report can be found under the Security menu.

List of Accounts page will now identify account with invalid credentials
The List of Accounts page will now display a yellow warning sign if an account that has been added contains invalid credentials.


July 21, 2015

CloudCheckr will be performing a scheduled system update on Tuesday, July 21, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Improvements to the Account List page
The list of accounts page has been improved to allow for column sorting, saving which columns you’d like to view, easier to view credential issues, and more responsive filtering.

Security Permissions report expanded to cover EC2
The Security Permissions report (found under Security menu) now supports EC2 instances in addition to S3 buckets. This report provides you with a comprehensive set of permissions and policies for your resources.

Notes section added under Settings/Edit Name
You can now add account-specific notes to each of the accounts you’ve created within CloudCheckr. These notes, which can be viewed by any User or Admin with access to the account, can be added and managed under the Settings > Edit name menu.

SNS Topics incorporated into Perimeter Assessment report
The Perimeter Assessment report now reports on any publicly accessible SNS Topics that exist within your account. This report can be accessed within the Security menu.

Use saved filters from Advanced Grouping in the Invoice Generator
You can now generate invoices based on the saved filters you’ve create within the Advanced Grouping report.
Note: When creating an invoice using a Saved Filter, it will ignore the accounts associated with the selected customers in the invoice generator and instead match the data, and accounts, from the saved filter.

Added Last Used to the List of IAM Users report
The List of IAM Users report will now include a value showing the last time the IAM user accessed the AWS account. This report can be found under Inventory > IAM > List of Users.

New Custom Billing Charges
You now have the ability to add custom charges, or suppress already-existing charges, within your billing data which will be reflected in the all CloudCheckr cost reports when viewing List price. This feature is only available within Payer accounts under the AWS Partner Tools menu.
NOTE: This feature is currently in Preview.

New Account Families
Account Families allows you to map together AWS account and then generate List prices as if that family was a consolidated bill. This allows for accurate invoice and cost generation for more complex situations – such as a customer with 5 AWS accounts. In this case, that single customer should get the benefit of cross-account RI usage, tier pricing, volume RI pricing, etc. You can your Account Families within Payer accounts under the AWS Partner Tools menu.

3 new API methods for WorkSpaces

  • inventory/get_resources_workspaces_summary
  • inventory/get_resources_workspaces_details
  • inventory/get_resources_workspaces_directories

Best practice check “Previous Generation EC2 Instances Should Be Migrated” updated for newest instance families

8 New Best Practice Checks:

  • RDS Instance With No CloudWatch Alarm For RDS Disk Usage
  • Redshift Cluster less than 1 GB Of Free Storage
  • Redshift Cluster less than 1 MB Of Free Storage
  • Redshift Cluster less than 10% Of Free Storage
  • Idle DynamoDb Tables
  • Unused Workspaces
  • Failed Logins in WorkSpaces
  • WorkSpaces With Unhealthy State

June 23, 2015

CloudCheckr will be performing a scheduled system update on Tuesday, June 23, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Redesigned List of Accounts page & added Account Search
The list of accounts page has been completely redesigned. You can now choose to show or hide Multi-Account Views, Payee accounts, and/or Payer accounts. The list of accounts will include the AWS Account Id, its friendly name, and its payer account (assuming it has one). You can also search for specific accounts by name and/or Id.

Ability to choose which accounts from billing files to download
When adding a consolidated payer account to CloudCheckr you can now choose which account(s) from the AWS detailed billing report you would like to have added to CloudCheckr. CloudCheckr will only process costs from the account(s) you choose. This setting can be managed under Settings > Detailed Billing Bucket.

Made several improvements to the Invoice Generator

  • Ability to schedule PDF invoices to be emailed monthly
  • Apply your AWS Credits to Customers
  • Can export all (or multiple) invoices at once and have those emailed to you in whichever format you’d like
  • You can now delete your created Customers

Improvements to the Improperly Tagged Resources Report Email
The data in the email has been reorganized to make it easier to read and understand large datasets. This email can be enabled/disabled under Settings > Email Settings.

Added several new reports for the AWS WorkSpaces service

  • WorkSpaces Spend Analysis Summary Report
  • WorkSpaces List of Directories Report (also added to MAV)
  • WorkSpaces CloudWatch metrics to CW Historical Export
  • Custom WorkSpaces reports can be created and saved within Inventory > Custom Reports

Added Summary tables to several Inventory details Reports
These tables will give you a total count of resources and other important statistics, depending on the service.

Map Exact function added to Tag Mapping
When adding custom tag mappings you can now choose to “Map Exact” on the tag key and/or value. This will have CloudCheckr auto-add the appropriate regex to ensure an exact match when mapping.

Added CSV export to Security Permissions report

Ability to suppress $0 cost rows in the Detailed Billing Summarization Report

New API call to query Reserved Instance Amortization Report

3 new Best Practice checks

  • Redshift Clusters in Maintenance Mode
  • Redshift Cluster Without Data-At-Rest Encrypted
  • Redshift Unhealthy Clusters

June 2, 2015

CloudCheckr will be performing a scheduled system update on Tuesday, June 2, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Edit Email Addresses in Admin Email Settings page
Admin users have a “Configure Emails” button on the list of accounts page which allows for the management of the emailed reports for all accounts in a single view. This menu now allows you to edit/add/delete email recipients for each account.

Improved email for Improperly Tagged Resources
The Improperly Tagged Resources email has been improved for better data presentation. It also now includes the IAM User that launched the improperly tagged resource. This email can be enabled/disabled within the Email Settings menu.

Invoice Generator – Tie Customers to Multiple Accounts
The Invoice Generator, found under Cost > Partner Tools with Payer Accounts, now allows you to create Customers that combine the data from multiple AWS accounts. If you have a customer with multiple AWS accounts you can now create a single customer in the Invoice Generator, that rolls up the data from whichever accounts you’d like into a single invoice.

Configuration screen for service limits
Within the Settings > Service Limits page you can now enter your custom service limits for VPCs per region, EC2 Reserved Instances per region, IAM Groups per account, etc.

Ability to clone CloudCheckr Users
This feature allows you to take the configuration of an already-created CloudCheckr user and create new users with the same configuration. To clone a user, navigate to the Users page, load the user you would like to clone, click the Copy button at the bottom of the page and enter the email address(es) for the new user(s).

Ability to create multiple CloudCheckr users at once
When creating new users in CloudCheckr you can enter multiple email addresses, separated by comma. The configurations set during user creation will apply to all users added.

WorkSpaces reports added to Inventory
Inventory in general accounts, and Multi-Account Views, will now have a WorkSpaces Summary and List of WorkSpaces report.

New Reports added to Multi-Account Views

  • SQS Reports
  • SES Reports
  • AWS Config Reports
  • Route53 Reports
  • Kinesis Reports
  • SimpleDB Reports
  • Data Pipeline Reports

Bookmark improvements to Advanced Grouping
If you build a report in Adv. Grouping (under Cost > AWS Billing) you can save and/or share the bookmark from that report. That will allow you, or the user you share the bookmark link with, to access that dataset directly. This works with saved filters as well as data built ‘on-demand’.

New report: Tag Mapping – Splitting
This new report allows you to split the costs from your detailed billing data and have it applied across multiple tags. This can be used to distribute costs across multiple projects (each designated with a unique tag), or to allocate costs as needed. You can split costs based on Tags or on properties, such as Account, Region, AZ, Service, Operation, Usage Type, or Resource Id. This report can be found under Cost > Tags (from Detailed Billing).

List price – Handles RI Volume discounts
When generating reports based on List Price in Cloudcheckr, Reserved Instance Volume Discounts will be accounted for.

4 New API Calls for IAM Inventory Reports

  • inventory/get_resources_iam_users
  • inventory/get_resources_iam_groups
  • inventory/get_resources_iam_roles
  • inventory/get_resources_iam_policies

10 New Best Practice Checks

  • S3 Buckets With Any Permission Set To Authenticated Users Group
  • S3 Buckets With ‘Edit Permissions’ Permission Set To Authenticated Users Group
  • S3 Buckets With ‘List’ Permission Set To Authenticated Users Group
  • S3 Buckets With ‘Upload/Delete’ Permission Set To Authenticated Users Group
  • S3 Buckets With ‘View Permissions’ Permission Set To Authenticated Users Group
  • S3 Sensitive Objects Stored for Authenticated Users Group
  • S3 Buckets That Allow Everyone Access to CloudTrail Log Files
  • S3 Buckets That Allow Everyone Access to Billing Reports
  • S3 Buckets That Allow Everyone Access to S3 Log Files
  • S3 Buckets That Allow Everyone Access to CloudFront Log Files

May 11, 2015

CloudCheckr will be performing a scheduled system update on Monday, May 11, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added Filter by Tag to the Invoice generator
When exporting your invoices from the Invoice Generator, you can now filter the invoice by tags.  To filter the invoice by tag, click the Advanced Options button on the Create Invoice tab of the Invoice Generator.

Scheduling in the Invoice Generator
You can now set your invoices to be automatically emailed on a user-defined day each month, as well as the specific invoice and cost type to be delivered.  You can schedule invoices within the Create Invoice tab of the Invoice Generator by clicking the ‘schedule’ button.
NOTE: Scheduling currently only supports CSV formatted invoices.

New Find AWS Resource button from Account Page
The list of Accounts page, where are you brought when you login to CloudCheckr, now has a button that allows you to search for specific resource IDs. This is particularly useful for customers with many AWS accounts that want to know which account an EC2 Instance, S3 Bucket, EMR Cluster, or RDS Database Instance resides within.

Added export for AWS MarketPlace Cost Summary report
You can now export the data from the AWS MarketPlace Cost Summary report, which can be found within the Cost > Spend Analysis > Marketplace menu.

Emailed reports now have custom logos
Your custom logos will now display in each of your automated CloudCheckr report emails.

Added Bookmarks capabilities for reports
You can now bookmark the direct links to each report within any of your CloudCheckr accounts. These bookmarks will be available on the list of Accounts page, allowing you direct access to frequently visited reports.

Added UI status to see last time Billing Data was updated
Each account will now show you, in the green bar at the top of the page, the last time CloudCheckr checked for billing updates from Amazon.

Reworked EMR reports to better manage large number of Clusters
The Elastic MapReduce reports now update hourly for more frequent, efficient reporting.
NOTE: You need to add the following permission to your IAM policy for CloudCheckr to report on your EMR data: “elasticmapreduce:ListInstances”.  You can always see our full recommended IAM policy here: http://support.cloudcheckr.com/complete-iam-policy/

UI improvements to DBR Summarization report
The DBR Summarization Report, found under Cost > AWS Billing, has been improved to make report generation, saving filters, and viewing report history easier.

Allow basic user to create CloudCheckr API Keys (no longer an Admin feature)
Previously only Admin users had the ability to generate API Access Keys. This function has been enabled for all user-types.

Added filters for List of Network ACLs report
You can now filter your Network ACLs by several variables. This report can be found under Security > VPC > Network ACLs

3 New reports added to Multi-Account Views:

  • CloudFront Summary
  • List of CloudFront Stacks
  • RDS Reserved Instance Summary

2 New Best Practice Checks:

  • Redshift Reserved Instance Possible Mismatch
  • New Account Added to Consolidated Bill

April 17, 2015

CloudCheckr will be performing a scheduled system update on Friday, April 17, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Improved managing customers in the Invoice Generator
Managing customers is no longer in a pop-up, making it faster and easier to view and update customer information within the report.

Tagging Rules filtering by Account ID
When building Tagging Rules you can now dictate which account(s) those rules should be applied to. The Improperly Tagged Resources Report will also allow you to filter the resource list by AWS Account ID. These reports can be found under Cost > AWS Billing > Tags.

List of Reserved Instances shows Account ID of matched EC2 Instances
The EC2 List of Reserved Instances, found under Cost > Reserved Usage > EC2, contains a table listing the EC2 instances that CloudCheckr has matched with the Reservation. This table now includes the AWS Account ID where the instance resides.

12 New Best Practice Checks

  • Redshift Reserved Nodes That Are Expiring In The Next 7 Days
  • Redshift Reserved Nodes That Are Expiring In The Next 30 Days
  • Redshift Reserved Nodes Purchase Recommendations
  • Redshift Reserved Node Payment Failed
  • Redshift Reserved Node Payment Pending
  • Redshift On-Demand Nodes Not Using Reserved Instance Pricing
  • Idle Redshift Nodes
  • Redshift Reserved Nodes Not Utilized
  • EC2 Reserved Instance Purchase Made
  • RDS Reserved Instance Purchase Made
  • ElastiCache Reserved Instance Purchase Made
  • Redshift Reserved Instance Purchase Made

March 26, 2015

CloudCheckr will be performing a scheduled system update on Thursday, March 26, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

China costs now display with ¥ instead of $
Costs from AWS accounts that are hosted within the China (Beijing) region, costs will properly display with ¥ instead of $.

New metrics pushing to the AppDynamics extension
Added the option to push CloudWatch metrics to AppDynamics.

Added more flexible currency conversion to the Invoice Generator
The Invoice Generator now has a text box where you can enter whatever type of currency you wish for your invoices.

Added Suppress capability to the Invoice Generator
When editing customer info within the Invoice Generator, you can generate a full list of their current charges and then choose which of those charges to suppress from the invoice. You will have the option to permanently suppress a charge, or only for the current invoice.

Added Email capability for Multi-Account views for Best Practices report and Daily Consolidated Billing Summary
Within each Multi-Account View’s Settings menu you will now see an Email Settings option. In this menu you can enable a daily Best Practice and Daily Consolidated Billing Summary email to be delivered from the Multi-Account view. This is disabled by default.

Added Support Cases report in Multi-Account Views
The Support Cases Summary and List of Cases reports have been added to Multi-Account Views. These can be found under Inventory > Support Cases.

Added export for Perimeter Assessment report
The Perimeter Assessment report (found under the Security menu) now has export options for both CSV and PDF.

Added export option to the Savings Analysis report
The Savings Analysis report (found under Cost > Partner Tools) now has export options for both CSV and PDF.

Fixed option for “Amortize Reserved Instance Cost” Billing reports
Choosing to Amortize Reserved Instance costs within the Bill Summary reports (under Cost > AWS Billing) should return the proper cost data now.

Added filtering in the Inventory IAM Users, Roles, and Groups report
These IAM reports under the Inventory menu now have filtering options to allow you to search for specific datasets.

Enhanced UI for Tagging Rules
The Tagging Rules interface (under Cost > Tags) has been updated to make creating tagging rules easier.

Enhancements to Tag Mapping
You now have the option to map costs to tags using multiple properties within a single mapping. Just note that when adding multiple properties in a single mapping it will only map costs that match ALL properties. If you add a property for Region US East and a second for Region EU West, that will return no costs. In that scenario you would want to add those as two separate mappings, one for US East and one for EU West.

New API call get_publicly_accessible_resources
This new API call will export the publicly accessible endpoints from Ec2 Instances, Rds Instances, Redshift Clusters, and S3 Buckets. You can find documentation on this new call here: http://support.cloudcheckr.com/cloudcheckr-api-reference/

Two new Best Practice Checks:

  • Previous Generation ElastiCache Nodes Should Be Migrated
  • New Reserved Instance Purchase Made

March 3, 2015

CloudCheckr will be performing a scheduled system update on Wednesday, March 3, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added initial support for China (Beijing) Region (Preview Mode)
CloudCheckr now supports the AWS China (Beijing) Region. When configuring a new account that is hosted in the China region you will need to select the “Credentials are for a China account” checkbox.

Added IAM User to the CloudTrail Alerts email
CloudTrail alerts will now list the IAM username in the event details.

Added Select All boxes to Admin Email Settings page
Admin users have a “Configure Emails” button on the list of accounts page which allows for the management of the emailed reports for all accounts in a single view. This menu now has Select All boxes for each email type so they can be enabled/disabled en mass.

Ability to use other currencies in the Invoice Generator
The Invoice Generator now allows you to choose non-USD currency for its output.

Added option to configure emails to get CloudCheckr system notification messages
The list of accounts page now displays an Email icon to the right of “What’s New”. This is where you can dictate which email address(es) should receive CloudCheckr system notification messages and release notes.

Improvements to Improperly Tagged Resources report
The Improperly Tagged Resources report (found Under Cost > Tags from Detailed Billing) now displays data in a more organized fashion and also has a drilldown link to the CloudTrail Events report to see which user created the improperly tagged resource.

AWS Partner Saving Analysis Report enhancements
Added additional data points to the Partner Saving Analysis Report to provide a more accurate, more clear understanding of your savings. This report, which is found under Cost > AWS Partner Tools, is only visible when looking at an account in CloudCheckr that is linked to an AWS payer account.

New Extension for AppDynamics (Preview Mode)
Under Settings > Extension for AppDynamics you can configure CloudCheckr to push metrics into your AppDynamics dashboard.
NOTE: For this extension to work properly, you must activate the HTTP listener on your AppDynamics Standalone Machine Agent.


February 13, 2015

CloudCheckr will be performing a scheduled system update on Monday, February 13, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

New AWS Credits Summary report
This new report, found under Cost > AWS Billing, allows you to track your AWS billing credits for any month/account/service combination.

Redshift RI reporting
CloudCheckr now offers 5 Redshift reserved instance reports, including summary, details, and purchase recommendations. These can be found under the Cost > Reserved Usage menu.

Activation links are available in Users page
When creating new users you now have the ability to copy their activation link directly from the Users page. This link will be available until the user’s login is activated.

Blended and List Cost added to Bill Summary reports
When viewing any of the Bill Summary reports found under the Cost > AWS Billing menu, you now have a dropdown to choose between Unblended, Blended, or List Pricing.
NOTE: Blended and List Pricing will only available beginning with the current month. If you would like to see this data historically, please contact support@cloudcheckr.com.

Performance improvements to Spend Analysis reports
The Cost Summary and Details reports within the Cost > Spend Analysis menu have all been optimized to return costs much faster.

Updated Invoice Generator UI
The Invoice Generator has been given a facelift, making it easier to add customer data and generate invoices.

PDF export added to Perimeter Assessment report
The Perimeter Assessment report now offers a PDF export. This report can be found within the Security menu.

Ability to add notes when ignoring best practice checks
When ignoring best practice checks, you will now be given the option to add a note detailing why the check is being ignored. You will be able to view these notes when filtered to the ignored checks in the report.

6 new Admin-Level API calls
The following API calls have been added:

  • account/remove_user
  • account/grant_account
  • account/revoke_account
  • account/get_users
  • account/get_accounts
  • help/get_all_api_endpoints

NOTE: Admin-Level API Access Key must be used to make these calls.
IMPORTANT: We have made a change to our API documentation, creating a standalone Admin-Level API Reference Guide. All account management API calls will be documented in this guide.
Please see here for more information: http://support.cloudcheckr.com/cloudcheckr-admin-level-api-reference/

Support for authentication against an LDAP directory


January 15, 2015

CloudCheckr will be performing a scheduled system update on Thursday, January 15, 2015. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Support for using roles for CloudCheckr read-only authentication
Instead of providing your IAM Access and Secret Key to connect your AWS account to CloudCheckr, you can now use cross-account access.
You can find step-by-step instructions on this new configuration setup here: http://support.cloudcheckr.com/creating-roles-for-cross-account-access/

New marketplace charges reports
Within the Cost > Spend Analysis menu you will now find a Marketplace Summary and Marketplace Details report. These reports will allow you to gain insight into your Marketplace costs within AWS.

New resource tags tracking reports
There are two new reports to help you monitor and manage your cost tags within AWS.

  • Resource Tags Lookup – allows you to see all tags associated with any resource.
  • Tagging Rule Builder – this report allows you to create specific tagging rules, and will flag resources that do not meet the tagging requirements. For example, you can create a rule that all EC2 instances must have an Environment tag and a Customer tag. Any EC2 instance that does not have either of those tags will be flagged.

NOTE: These reports are currently in BETA. They can be found under Cost > AWS Billing > Tags in Detailed Billing

New RI amortization report
This report, found under Cost > Reserved Usage > EC2, shows you how much you’ve spent on RI Upfront Fees each month, and what the amortized cost of those fees are, spread over the lifetime of each purchase.

Support for new RI types in the EC2 RI Purchase Recommendations (by Frequency)
Within the Cost > Reserved Usage > EC2 menu, you’ll see the new EC2 RI Purchase Recommendations (by Frequency) Current Gen report. This report is designed to provide EC2 RI Purchase Recommendations, using the new Partial, No Upfront, and All Upfront payment options, for environments that utilize auto scaling.

Added Alerts for Publicly-Accessible Resources
Within the Alert Builder you can now create an alert to be triggered whenever a publicly accessible resource has been launched.

Showing custom logo in the UI now
Your uploaded custom logos will now display in the top-left corner of the app (previously they only displayed in PDF exports from reports). This logo can be managed by Admin users within the Settings like at the top of the app.

Best Practice Check – SPF set for Amazon SES domain

NOTE: This update includes improvements to CloudCheckr’s Elastic MapReduce reporting.  These changes may require an update to your IAM policy to include the following permissions:

   "elasticmapreduce:DescribeJobFlows",
   "elasticmapreduce:DescribeStep",
   "elasticmapreduce:DescribeCluster",
   "elasticmapreduce:ListSteps",
   "elasticmapreduce:ListInstanceGroups",
   "elasticmapreduce:ListBootstrapActions",
   "elasticmapreduce:ListClusters",

Please see here for more information: http://support.cloudcheckr.com/enabling-emr-reports/


You can find earlier updates here:

2014 Updates
2013 Updates