CloudCheckr Updates

October 17, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

get_best_practices_v2 API call now supports Azure

get_detailed_billing_with_groupingv2 call now supports multi-account views

AWS UPDATES

CloudFormation Template will now read as ‘CC’ instead of ‘CloudCheckr’
When using the CloudFormation (instead of Manual) option when configuring accounts, the template URL will read ‘CC’ instead of ‘CloudCheckr’.

Fix Now capabilities will now only display on most recent Best Practice Report
When viewing the Best Practice report you will only be able to utilize the ‘Fix Now’ capabilities in the most recent version of the report. Looking at historical reports will disable this functionality.

Performance Improvements to Advanced Grouping saved filter generation
The back-end process to build that data for saved filters for the Advanced Grouping report has been improved, allowing for much faster build times.

Added Fix Now capabiliies for the IAM Password Policy Not Enabled check
The IAM Password Policy Not Enabled best practice check now offers ‘Fix Now’ functionality that will enable an IAM policy automatically.

Lambda added to the Untagged Resources report
The Inventory > Tagged and Inventory > Untagged Resources reports will now both report against Lambda.

New CIS Benchmark: 1.18 Enable Ensure IAM Master and IAM Manager Roles are Active

Two new best practice checks:

  • IAM Role Policies with full admin privileges
  • Default Security Groups Allowing Traffic

AZURE UPDATES

Added EA Usage Summary Report
The EA Usage Summary report, available within the Cost > Summary Reports menu, will show details including Balance, Commitment, and Overages, for the agreement.

Added Service Requests Inventory reports for CSP
CSP accounts will now have an Inventory > Service Request menu where details about services requests can be reviewed.

Custom Charges now support an end date
When creating and editing custom charged within the Cost > Azure Partner Tools > Custom Charges screen, you can now apply an end date to the custom charges.

Added three services to change monitoring:

  • App Service Plans
  • Load Balancers
  • Application Gateways

October 09, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 09, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added rounding notification to Monthly Billing Summary report
The Cost > AWS Billing > Summary Reports > Monthly report now includes help text at the top explaining how rounding large decimals can impact the costs displayed within CloudCheckr.

Added instance name and average metrics to Heatmap exports
When exporting Heatmaps to PDF from the Utilization menu, you will now see a second page showing the instance name and instance-specific metrics.

Added the ability to configure the IP list in the Blocklisted IP Address Making API Calls check
You now have the ability to configure the IP lists for the Blocklisted IP Address Making API Calls best practice check. To update the check configuration click on the gear icon to the right of that check, which can be found on the Security tab.
NOTE: The IP lists can be created and managed within the Admin Functions list on the main list of accounts page.

AZURE UPDATES

Added a tool to find Blob Containers that can be accessed by the public
CloudCheckr now offers a quick tool that allows you to enter the URL of your Blob Container to see if that Container is publicly accessible. You can access this tool at http://blobcheckr.com

Added List of Application Gateways Inventory report
There is new List of Application Gateways report. This report can be accessed within the Inventory > Networking menu.

Added Subscription to List of VMs report in Multi-Account Views
When viewing the List of Virtual Machines report within multi-account views, the Subscription where the VM resides will now display.

Reorganized Azure Network Security Group check into ‘with’ and ‘without’ resources
The Network Security Group best practice checks have been redone. Now there ware two checks for each: one for those groups WITH resources, and one for those WITHOUT.
These are the checks that have been updated:

  • Network Security Groups Outbound Rules Set To All Ports
  • Network Security Groups Inbound Rules with Potentially Dangerous Ports Exposed
  • Network Security Groups Inbound Rules with Specific Ports Exposed
  • Network Security Groups Outbound Rules with Dangerous Ports Exposed
  • Network Security Groups Outbound Rules with Potentially Dangerous Ports Exposed
  • Network Security Groups Inbound Rules Set to All IPs and All Ports
  • Network Security Groups Outbound Rules Set to All IPs and All Ports

Added Azure Container Service Inventory Reports
A new Summary and Detailed report has been added to the Inventory > Container Services menu.

Added an Improperly Tagged Resources daily email
You can now have the output of the Improperly Tagged Resources report emailed on a daily basis. This email can be enabled and configured within the Account Settings > Email Settings menu. NOTE: you must first create tag rules within the Cost > Tagging > Tagging Rules menu.

Improved the format of the Improperly Tagged Resources CSV export

Added cost to the details of the App Service Plans with No Apps check
The App Service Plans with No Apps best practice check has been updated to show the cost of the App Service Plan(s) being flagged by the check.

New Best Practice Check

  • Managed Disk without Backup Protection

GOOGLE UPDATES

New Best Practice Check

  • Large Objects Being Stored in Cloud Storage

October 02, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 02, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

New Admin Call

  • account/get_accounts_v4

New Azure Call

  • inventory/get_resources_virtual_machine_details

AWS UPDATES

Added PDF Export to RI Purchase Recommendation Reports

  • EC2 by Instance
  • EC2 by Frequency
  • RDS

Workflows broken into tabs
The Automation > Workflows page has been reorganized into multiple tabs. Non-workflow admin users will see tabs for their open and closed workflows. Workflow admins will see their open and closed workflows, as well as all open and closed admin workflows.

More information added to SNS Alert Notifications
Alerts delivered via SNS will now include details for the alert that was triggered. Previously, the SNS message only stated that an alert was triggered with no other information. Please note that the next update will expand upon the amount of detail being delivered within the SNS alert.

CSV export added to Certificate Manager

AZURE UPDATES

Performance improvement to the Billing Dashboard
The Cost > Azure Billing > Dashboard report has been revamped, making it load and retrieve data much faster.

Redis Cache added to Change Monitoring
The Security > Activity Monitoring > Change Monitor report now reports against changes made to Redis Cache.

New Best Practice Check

  • Application Gateway with Web Application Firewall (WAF) Disabled

September 25, 2017

CloudCheckr will be performing a scheduled system update on Monday, September 25, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATE

Showing/hiding columns on the list of accounts page
The list of accounts page now gives you the option to choose which columns to show or hide.

AWS UPDATES

Added the ability to include credits in Advance Grouping report
The Advanced Grouping report will now include credits by default. There is a checkbox added to the report that allows you to hide these credits if you would like a cost-only report. Note that historic months will need to be reloaded to see credits in this report.

Added the ability to include account families in advance grouping report
When filtering by accounts within the Advanced Grouping report you now can choose to filter by AWS account, or by Account Family.

Added Elastic File System summary report
There is now an Elastic File System summary report within the Inventory menu.

Enable custom charges by a group of accounts
When adding custom charge tiers you now have the option to either sum all accounts and pass those through the custom tiers, or to pass each individual account through the tiers. This provides greater control and flexibility when establishing custom charges.

AZURE UPDATES

Added a Right-Sizing report for Azure SQL
The Utilization menu now includes a Right-Sizing report for Azure SQL.

Additional data displayed for Redis Cache inventory

Improvements to the Historical Month Billing Summary CSV Export

Added 5 new BPC’s

  • App Services with Unknown resource health
  • App Service Plan without AutoHeal Enabled
  • App Service Plan with under utilized memory
  • App Service Plan with over utilized memory
  • Managed Disk without delete lock

GOOGLE UPDATES

Two new Inventory reports:

  • Topics and Subscriptions Detail
  • Topics and Subscriptions Summary Report

September 18, 2017

CloudCheckr will be performing a scheduled system update on Monday, September 18, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Updated Forgot Password screens and workflow
In addtion to an improved look and feel, when using the forgot password function, CloudCheckr will email you a link to the rest password page, and a key you must enter into a form on that page.

AWS UPDATES

Added ability to view more than 20 connections in VPC Flow Logs
Pagination capabilities have been added to the VPC Flow Logs report, allowing users to view more than the top 20 connections.

Added List of Elastic File Systems Inventory report
A List of Elastic File Systems report has been added to the Inventory > EFS menu.

Automation Workflows screen reorganized to display newest items first
Workflows now default to showing the newest items first, making it easier to identify the most recently executed tasks.

Updates to CIS Benchmark:

  • 2.6 Ensure S3 bucket access logging is enabled on the CloudTrail S3 bucket

New CIS Benchmarks:

  • Ensure rotation for customer created CMKs is enabled
  • Ensure appropriate subscribers to each SNS topic
  • Ensure no security groups allow ingress from 0.0.0.0/0 to port 338
  • Do not setup access keys during initial user setup for all IAM users that have a console password
  • Ensure The Default Security Group of Every VPC Restricts All Traffic

New Best Practice Checks:

  • IAM Users with Console Access Should Not Have Access Keys That Were Created at Initial User Setup
  • Default Security Groups Should Not Allow Any Traffic
  • Lambda functions with Admin privileges

AZURE UPDATES

Added App Service Plan Right Sizing report
A new right sizing report, specific to App Service Plan, has been added to the Utilization menu.

Improvements to the Single Day and Single Month Billing Summary CSV Exports

VM Right Sizing updated with information on enabling memory metrics for your VMs
If no memory metrics are available for your virtual machines, the right sizing report will notify you and offer information on how to populate that data.

New Best Practice Checks:

  • Network Security Groups Outbound Rules With Potentially Dangerous Ports Exposed
  • App Service Plan is Unavailable
  • App Service Plan Has Exceeded Usage Quota
  • App Service Plan CPU Under / Over Utilized
  • App Service without Backup Scheduling Enabled
  • App Service with SSL Disabled
  • App Service with Critical Recommendations

September 11, 2017

CloudCheckr will be performing a scheduled system update on Monday, September 11, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Re-implemented two Admin functions on List of Accounts page:

  • CSV Account Upload – allows you to upload a CSV for bulk account creation.
  • Save List of Accounts to CSV – allows you to export a list of your accounts to a CSV file.

AWS UPDATES

Usability improvements to Inbound Rules Fix Now capability
The interface and workflow for configuring the Fix Now options for the inbound rules best practice checks has been improved.

Updated RDS List of Instances CSV export
The CSV export from the Inventory > RDS > List of DB Instances has been updated to more closely match the format from the List of EC2 Instances export.

Custom Charges display by description in invoices
A new checkbox has been added to the Cost > AWS Partner Tools > Report > Generate Invoices screen, labeled, ‘Show custom charge descriptions’. When this checkbox is enabled, when you export an invoice any custom charges added to CloudCheckr will display as their description (instead of displaying as coming from the ‘Custom’ service). This will be true for any invoice other than Summary by Region, or invoices based on Saved Filters (those will adhere to the saved filter formatting). This will make it clear to the invoice recipient what the charges are for.

Can now add List of S3 buckets directly to custom reports
You can now save your List of S3 Buckets reports directly to custom reports from the Inventory > S3 > List of Buckets report. Previously you had to use the Create Custom Report functionality to save S3 reports.

Added KMS Key Id to List of Trails report
The Security > Activity Monitoring > AWS API (CloudTrail) > List of Trails report will now display the KMS key Id, if applicable.

New Best Practice check

  • CloudTrail Logs Not Encrypted at Rest Using KMS CMK

New CIS Benchmark

  • Ensure VPC flow logging is enabled in all VPCs

Added inventory tag support for:

  • Glacier
  • DynamoDB
  • Elasticache
  • Lambda
  • KMS
  • EFS

AZURE UPDATES

Collecting SQL DTU metrics
SQL DTU (database transaction units) are now being collected for the SQL databases.

Added Profit Analysis report
The Profit Analysis report has been added to the Partner Tools menu.

Added SQL DB Advisor recommendations to Best Practice Report
The Azure Advisor tab in the Best Practice report will now also include SQL DB Advisor recommendations.

Added configuration options to Idle SQL Database Instances check
You can now configure the parameters of the Idle SQL Database Instances best practice check, dictating the idle percentage as well as the number of days to check against.

Added support for South Africa’s North and West locations


September 01, 2017

CloudCheckr will be performing a scheduled system update on Friday, September 01, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Ability to filter Network Usage alerts by Account
When creating Network Usage alerts within the Cost > Alerts > Manager menu, you now have the ability to filter these alerts by AWS account.

Re-implemented Find AWS Resource functionality to list of accounts page
The main list of accounts page offers the ‘Find AWS Resource’ button and functionality once again. This button allows you to find which account owns specific AWS resources.

Updates to AWS Partner Tools being logged in Audit Log
Any changes being made against the following features within the Cost > AWS Partner Tools menu will be captured by the Admin Audit log.

  • Custom Billing Charges
  • Configure Custom Cost
  • Payee Support Charges
  • Custom Usage Rates

Added Fix Now capability for CloudTrail Unauthorized Access Attempts
The CloudTrail Unauthorized Access Attempts best practice check now offers ‘Fix Now’ functionality that will remove the IAM user where the unauthorized attempts are originating from.

Added Fix Now capability for EBS Volumes without Recent Snapshot
This new Fix Now function creates a snapshot of an EBS volume if that volume is attached to an instance and the instance is found to be in a running state.

Tag Mapping now supports Tag AND Property mapping in same rule
When setting up tag mappings previously they could only be setup to map a tag or a property. Not both. Now, you can map both a tag and a property in the same mapping. These are configured within the Cost > Tags > Tag Mapping report.

Stale IAM Users check now shows user and password creation date
The data displayed within the Stale IAM Users best practice check has been updated to include the user and password creation date.

5 New CIS Benchmarks:

  • 1.19 Maintain current contact details
  • 1.2 Ensure CloudTrail log file validation is enabled
  • 2.6 Ensure S3 bucket access logging is enabled on the CloudTrail S3 bucket
  • 3.15 – Ensure appropriate subscribers to each SNS topic
  • 4.1 – Ensure no security groups allow ingress from 0.0.0.0/0 to port 22

4 New Best Practice Checks:

  • No support role has been created to manage incidents with AWS Support
  • Rotation not enabled for customer created CMKs for KMS encryption
  • Cloudtrail Bucket(s) Without Access Logging Enabled
  • EC2-Classic Security Groups Inbound Rules With Potentially Dangerous Port 22 Exposed

AZURE UPDATES

Added charts to VM Scale Set Summary
The VM Scale Set Summary report within the Inventory menu now has additional pie charts.

Added Untagged Resources Report
An Untagged Resources report has been added to the Inventory module. This report allows you to see which resources are missing tags, or are missing specific tags.

Added Snapshots to Managed Disk inventory reports
A new report for Snapshots has been added to the Managed Disk inventory.

Can now specify currency and region for billing collection
You can now specify the currency and region for an Azure Inventory account that has billing data collection enabled. This is managed within the Billing Settings menu.

1 New Best Practice Check:

  • Idle SQL Server Database Instance

6 New API calls:

  • add_azure_csp_account
  • add_azure_ea_account
  • add_azure_inventory_account
  • edit_azure_csp_credential
  • edit_azure_ea_credential
  • edit_azure_inventory_credential

GOOGLE UPDATES

Added Buckets to Change Monitoring
The Change Monitoring report now reports against changes being made to storage Buckets.

VMWARE UPDATES

CSV export added to Cost Calculator
You can now export the results from the VMware cost calculator to CSV.

Cluster Overview now shows current and max metrics
The VMware Cluster Overview now shows the current and max metrics for the cluster.


August 25, 2017

CloudCheckr will be performing a scheduled system update on Friday, August 25, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Updated CIS Benchmarks to properly reflect Scored vs Not Scored
The CIS Benchmark report has been updated to properly reflect Scored vs Not Scored controls.

Saved Filter updates added to audit log
Changes being made to saved filters within the Advanced Grouping report are now being included within the Admin Audit Log. This allows you to see who is making changes to saved filters within your account.

New CIS Benchmark added:

  • Ensure security contact information is registered

Improved tagged resource processing in billing data collection
CloudCheckr continues to make speed and performance improvements to the billing collection process. With this improvement tagged resources are now being processed at a much faster rate.

Improved performance of report updates
In addition to improving the speed and performance of the billing data collection, improvements are also being made to the report updates.

AZURE UPDATES

Added Best Practice Report to multi-account views
Azure multi-account views will now build and display the Best Practice Report. This report will consolidated and display the Best Practice report across all accounts linked to the multi-account view.

Added unused resources to Cost Savings report
The Cost Savings report will now reflect your unused resources.

New Best Practice Check:

  • SQL Server without Failover Group

August 17, 2017

CloudCheckr will be performing a scheduled system update on Thursday, August 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Redesigned the list of accounts page
The list of accounts page has been redesigned, improving the look and feel.

AWS UPDATES

Improved S3 List of Buckets CSV export

Improvements to Regions without AWS Config Enabled Fix Now

Added Fix Now capabilities to CloudTrail Unauthorized Access Attempts

AZURE UPDATES

New Cost Changes Report

New Cost Savings Report

Improved VM Right-Sizing for RDMA and Dedicated Hardware

Added Custom Report functionality to various reports

Fixed Custom Report functionality on multiple reports

Added OS Type to VM Summary report

Added new Inventory reports:

  • Service Bus Summary Report
  • List of Service Buses Report

Three New Best Practice Checks:

  • Network Security Groups Outbound Rules With Dangerous Ports Exposed
  • Application Gateways With Fewer Than Two Healthy Machines
  • Network Security Groups Outbound Rules Set To All Ports

August 11, 2017

CloudCheckr will be performing a scheduled system update on Friday, August 11, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added contract budget tracking alert
A new cost alert has been added to the Cost > Alert > Manager menu. The contract budget alert allows you to track not only the spend against a user-defined budget, but also the amount of waste. This alert also integrates with saved filters from the Advanced Grouping report.

Improvements to two columns in EC2 List of Instances report
Clarity has been added to the following two columns within the EC2 List of Instances report:

  • Role
  • Volume Missing Tags

Updates to the CIS Benchmark report
The CIS Benchmark report has been updated to reflect scoring changes introduced by CIS.

Improvements to the ‘Is bucket public’ page
The webpage that allows you to enter the name of your S3 buckets to validate whether they are public or not has been improved, making it easier to identify private, public, or invalid buckets.

Further billing collection performance improvements
CloudCheckr continues to make speed and performance improvements to the billing collection process.

AZURE UPDATES

Added Retail Cost as option to cost reports
All Cost reports will now allow users to select ‘Retail Cost’ as the cost type.

Added Consumed Service Spend Analysis report
A Consumed Service Spend Analysis report has been added to the Cost menu. This report allows you to see a user-friendly, high-level breakdown of the costs for any consumed service. For example, you can filter on Compute and see a cost breakdown by VM, Storage, Networking, and Data Management. Each of those can be further broken down by sub-categories.

Retrieving Azure Marketplace cost data
Cost usage data from the Azure Marketplace will now be retrieved, and accessible within the Cost reports.

Added 14 additional Azure Security Center checks
The Azure Security Center tab within the Best Practice report now displays 14 additional checks.

Two New Best Practice Checks:

  • SQL Server Database Less than 10% of Free Storage
  • Premium Redis Cache Instance With No Firewall Rules

August 03, 2017

CloudCheckr will be performing a scheduled system update on Thursday, August 03, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Further billing collection performance improvements
CloudCheckr continues to make speed and performance improvements to the billing collection process.

Improperly Tagged detection improvements
As part of the billing improvements, the process that detects improperly tagged resources has been isolated ensure that it will execute on time, even within accounts with very large billing datasets.

Added Billing credit pass through for tiered resellers
Tiered resellers that apply credits to subaccounts will now have those credits properly pass down to those separate customer accounts.

Improvements to the List Cost Analysis CSV export
Additional datapoints that were previously added to the List Cost Analysis report are now included in the CSV export.

Added support for Blended/Unblended and List to DBR Summarization
When creating a summarized version of the DBR you now have the ability to use Blended/Unblended or List Cost. NOTE: When using List Cost you are limited to a subset of the columns. This report is available within the Cost > AWS Partner Tools > DBR menu.

Added 11 Fix Now functions to the best practice report:

  • EC2-VPC Security Groups Inbound Rules Set To All Ports (needs input)
  • EC2-VPC Security Groups Inbound Rules Set To All Ports (No Resources) (needs input)
  • EC2-Classic Security Groups Inbound Rules With Dangerous Ports Exposed (With Resources)
  • EC2-Classic Security Groups Inbound Rules With Potentially Dangerous Ports Exposed (With Resources)
  • EC2-VPC Security Groups Inbound Rules With Dangerous Ports Exposed
  • EC2-VPC Security Groups Inbound Rules With Potentially Dangerous Ports Exposed
  • EC2-VPC Security Groups Inbound Rules With Dangerous Ports Exposed (No Resources)
  • EC2-VPC Security Groups Inbound Rules With Potentially Dangerous Ports Exposed (No Resources)
  • EC2-Classic Security Groups Inbound Rules Set To All Ports (No Resources)
  • EC2-Classic Security Groups Inbound Rules With Dangerous Ports Exposed (No Resources)
  • EC2-Classic Security Groups Inbound Rules With Potentially Dangerous Ports Exposed (No Resources)

AZURE UPDATES

Support new Meter naming conventions
Microsoft has improved standardized names for Azure meter attributes. CloudCheckr has been updated to support these changes. For more information please see: https://azure.microsoft.com/en-us/support/meter-rename/

Can now control List Cost to be based off Pay-As-You-Go
A new option has been added to the Account Settings > Edit Billing Configuration menu that allows you to control whether or not List Cost will intially be based on Pay-As-You-Go pricing. This will be disabled by default and must be manually enabled.

Added Azure Security Center
Azure Security Center has been added to the Best Practice Report.

Improved Consumed Service consistency for mixed MAVs
Mixed multi-account views have been updated to better report against consumed services spanning the different billing sources (CSP, Enterprise Agreement, etc.).

Added Resource Group Filtering to Inventory reports
Azure inventory reports now support filtering by Resource Groups.

Added Cost Source filtering to the CSP Advanced Grouping report
An additional filter has been added to the Advanced Grouping report within CSP account, allowing you to filter by the cost source.

Added additional data to the List of Storage Accounts reports
Additional data has been added to the Inventory > List of Storage Accounts report, including Subscription ID, Location ID, Resource Group, etc.

Currency Code and Billing Region options added to Partner Tools
Two new options have been added to the Account Settings > Edit Billing Configuration menu that allow you to set both the default currency and billing region of your cost data. NOTE: The billing region cannot be changed once it is configured.

Two New Best Practice Checks:

  • Unattached Managed Disks
  • App Service Plan with no Apps

GOOGLE UPDATES

Virtual Machine added to Change Monitoring
The Change Monitoring report now reports against changes made against your Virtual Machines.


July 27, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 27, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Further billing collection performance improvements
CloudCheckr continues to make speed and performance improvements to the billing collection process.

Improvements to Virtual RIs
Virtual RIs now support regional scope RIs.

Improvements to saved filter creation notification
When saving a filter within the Advanced Grouping report, you can have CloudCheckr deliver an email notification once the save request is complete. This email can now be configured on a per-saved filter basis (previously there was one option per account).

Improvements to the user experience for Self-Healing checks
The user experience for Self-Healing best practice checks have been improved for checks that require user input (such as modifying security groups).

Updates to the CIS Benchmark report
The CIS Benchmark report has been updated to reflect scoring changes introduced by CIS.

AZURE UPDATES

Improved custom charge handling in Invoice Generator
It is now easier to identify the custom charges when exporting the data through the Invoice Generator.

New Budget vs Spend report for CSP
Within the Azure Partner Tools menu, CPS accounts now have a report that will track their budget versus their actual spend.

Displaying additional datapoints for App Service Plans
Several additional datapoints have been added to the Inventory > App Service Plans reports.

Added saved filter emails to Advanced Grouping
When creating a saved filter within the Cost > Azure Billing > Custom Reports > Advanced Grouping report, you can now configure those filters to be emailed on a daily, weekly, and/or monthly basis.

Added currency support to invoices
The Azure Invoice Generator now supports multiple currencies. This report can be accesse within the Cost > Azure Partner Tools menu.

New BPC:

  • SQL Server Database with Transparent Data Encryption Disabled

GOOGLE UPDATES

Added additional data for Bucket reporting
Several additional datapoints have been added to the Inventory > Bucket reports, providing deeper insight into the storage within your buckets.


July 20, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 20, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added EC2 System Manager Inventory reports
You can now view your EC2 Systems Manager information within the Inventory > EC2 menu.

Tag Filtering added to MAV EC2 Instance History by Time report
The EC2 Instance History by Time report, within Multi-Account Views, now includes tag filtering. You can access this report by logging into an AWS Multi-Account View, and navigating to Inventory > Trending > EC2.

Further billing collection performance improvements
CloudCheckr continues to make speed and performance improvements to the billing collection process.

Updates to the CIS Benchmark report
The CIS Benchmark report now reflects updates to the benchmarks made my CIS.

Added ability to export Savings report as a Summary
You can now export a pdf summary of the Savings report that excludes all of the resource items.

Improvements to the user experience for Self-Healing checks
The user experience for Self-Healing best practice checks have been improved for checks that require user input (such as modifying security groups).

Fix Now requests updated to run on an every-15 minute schedule

Better handling of international dates and currency
Reports and functionality that had been mishandling internaltional (non-US) dates and currency have been updated.

AZURE UPDATES

Improved Load Balancer Inventory Reporting
Probes are now properly handled within the Load Balancer reports

Added Tag Mapping – Splitting
This new report allows you to split your costs across multiple tags. This report can be found under Cost > Tags.

New BPCs:

  • Network Security Groups Inbound Rules With Specific Ports Exposed From Any IP Address
  • Network Security Groups Outbound Rules Set To All IPs and All Ports
  • Load Balancers With Fewer Than Two Healthy Machines
  • Idle Redis Caches

GOOGLE UPDATES

Added VPC Network Inventory reporting

  • Summary report
  • List of VPCs report

July 14, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 14, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Email summary report of self-healing checks
If you have CloudCheckr configured to ‘self-heal’ (automatically fix issues detected within the Best Practice report), you will receive an email summary of those actions taken on your behalf.

Improvements to the ‘Is bucket public’ page
The webpage that allows you to enter the name of your S3 buckets to validate whether they are public or not has been improved for usability.

Performance improvements for billing data collection
Improvments have been made to the billing collection process to speed up the amount of time it takes to process updates.

Added tag column and filtering to EC2 Right-Sizing report
You can now filter the EC2 Right-Sizing report by tag, as well as add a column to display tags within the report. This report can be found within the Utilization menu.

Added additional charts to the Lambda Summary Inventory report
Additional summary charts were added to the Inventory > Lambda > Summary report:

  • Function Names by Region
  • Code Sizes by Region
  • Memory Sizes by Region

Fix-Now capability for Over-Utilized EC2 Instances
Fix now capabilities have been added to the Over-Utilized EC2 Instances best practice check.

AZURE UPDATES

Ability to generate invoices based on subscription families
You know have the ability to generate invoices based on the Subscription families created within the Cost > Azure Partner Tools menu.

Ability to auto-create CSP customer accounts
Azure CSP accounts have a new menu added within the Account Settings named ‘Edit Billing Configuration’. Within this menu you can enable a feature that will automatically create an account for each customer subscription found during billing collection, if the account has not been created previously. These accounts will

Added the ability to schedule automated invoices
Within the invoice generator you now have the ability to configure invoices to be emailed automatically on specific days of the month. To schedule the invoice simply select the subscription family you would like to schedule the invoice for, and click the ‘Schedule’ button.

Added Inventory reporting for CSP service requests
Within the Inventory module you can now view your Service Requests with the Azure support team. These reports allow you to see the status, severity, creation date, last update, and other key datapoints for your requests.

4 new Best Practice Checks:

  • Network Security Groups Inbound Rules With Potentially Dangerous Ports Exposed
  • Publicly Accessible SQL Server
  • Blocklisted Public IP Addresses
  • Redis Cache Firewall Allows Broad Range of IPs

GOOGLE UPDATES

Inventory reports have been added for:

  • Snapshots
  • SSL Certificates
  • Organization Policies
  • Project Policies
  • Images

July 7, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 7, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added support for the new GovCloud region
GovCloud accounts in CloudCheckr will now be able to build inventory reporting for resources that reside in the new GovCloud region.

Added tag filtering to MAV EC2 Right-Sizing report
You can now filter the EC2 Right-Sizing report, by resource tags, when using the report within multi-account views.

Added two Fix Now buttons to the best practice report:

  • S3 Buckets That Allow Authenticated Users To Access S3 Log Files
  • EC2 – VPC Security Groups Inbound Rules allowing Broad IP Range

AZURE UPDATES

New best practice check:

  • Virtual Machines Running as Dedicated

GOOGLE UPDATES

Added notification messages for disabled services
CloudCheckr will now notify you if it is trying to retrieve inventory data against a disabled service within your Google account. You do not need to take action against this notification, or enable any service you do not wish to utilize.

UI UPDATES

RI Upfront Cost Amoritization report moved in report navigation
The RI Upfront Cost Amortization report can now be accessed by navigating to Cost > Reserved Usage > Amortizatoin within the report navigation.

Various style updates to increase intuitive interaction
CloudCheckr continues to make updates to its interface, making the report easier to navigate and use.

Additional color settings added to the customization settings
Within the Settings > Customization menu, there are now three options to control colors

  • Set your primary color – this controls the color bar spanning the app
  • Set your secondary color – this controls the color of the report navigation
  • Set your text color – this will set the text of the report navigation to white or black

June 29, 2017

AWS UPDATES

  • Ability to clone custom charges
  • IAM Summary reports updated with new information
  • Self-Healing BPCs switched to an ignore list will be excluded from scans
  • Self-Healing BPCs send email alerts upon scan and fix completion
    • Provides links directly to the workflow used for the fix
  • New Fix Now functionality for “EC2-VPC Security Groups Inbound Rules allowing Broad IP Range”

AZURE UPDATES

  • Changes to EA for Group by Day and Group by Year
  • Managed Disks added to the Inventory Summary Report

GOOGLE UPDATES

  • Change Monitoring functionality added for SQL Databases

GENERAL UPDATES

  • Server load balancing upgrades to improve stability and performance for our concurrent customers

API UPDATES

  • get_history API method updated to include optional resource_id parameter

UI UPDATES

  • Added enable/disable “View Dashboard” checkbox in Plan Settings

 


June 15, 2017

AWS UPDATES

  • New Workflow + BPC Fix Now button for EC2-VPC Security Groups Inbound Rules allowing IP Range
  • CloudTrail performance improvements

AZURE UPDATES

  • BPC added Unhealthy Virtual Machines Attached to Load Balancers
  • Redis Cache 7 Day Used Memory and Server Load charts added
  • Added Support for Tiered Custom Billing Charges

UI UPDATES

  • Font improvements
  • Forgot Password Page UI update

June 08, 2017

GENERAL UPDATE

  • Implemented new layout for landing page on white labeled accounts

AWS UPDATES

  • Added support for the AWS Cost and Usage report
  • Added Fix-Now Button for Under-Utilized EC2 Instances Best Practice Check
  • EC2 Right-Sizing report now ingests custom memory metrics
  • Added Saved Filters to the EC2 Right-Sizing report
  • Added self-healing functionality to the Best Practice report

AZURE UPDATES

  • Added Meter Details report, showing updates to Azure price lists
  • Added an Improperly Tagged Resources report for Tag Rules
  • Added new API call: get_detailed_billing_with_grouping_by_currency

GOOGLE CLOUD UPDATES

  • Added an Inventory Summary report

June 01, 2017

CloudCheckr will be performing a scheduled system update on Thursday, June 01, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

  • Updated the look and feel of the report navigation
  • “Integrations” have been re-named as “Add-Ons”

AWS UPDATES

Improvements to List Cost Analysis
List Cost Analysis now has a filter for AWS Service, and also gives users the ability to include Usage Quantity in the returned data.

Added support for tiered resellers with multiple payer accounts
CloudCheckr can now support tiered reseller configurations when the top-tier reseller has multiple payer accounts.

Added direct link from custom billing charges to List Cost Analysis
An info icon has been added to Custom Billing charges. When clicking this icon you will be redirected to the List Cost Analysis report, showing you the months that this custom charge has been active, and its impact.

Added error type filtering to CloudTrail Events report
When using the CloudTrail Events report within the Security > Activity Monitoring > CloudTrail menu, you can now filter the events based on Error response. This allows you to easily identify all the events that failed for specific reasons.

Added ability to apply all tags to EBS Volumes Without a Snapshot best practice check
When using the tag filter option within the EBS Volumes Without a Snapshot best practice check, you now have the option to Select All tags. Also, when saving this option within multi-account views, the pop-up won’t automatically close, making it easier to configure tags against multiple accounts.

New API Call

  • add_custom_billing_charge_monthly_premium

AZURE UPDATES

Support for multiple currencies has been added to 3 cost reports
If your Azure cost reports contain multiple currencies, you can now view each of those independently within the following cost reports:

  • Single Day Summary
  • Historical Monthly Summary
  • Advanced Grouping

Collecting Azure SQL firewall rule info
SQL Server firewall rules are now displayed within the Inventory > SQL Server > List of SQL Servers report.

Detecting Azure SQL firewall changes via Change Monitor
Changes made to SQL firewalls will be reported within the Security > Activity Monitoring > Change Monitoring report.

Collecting Azure App Services info
CloudCheckr has added two inventory reports for Azure App Services.

Partner Center / CSP invoice import compares invoices vs current rates

8 New Best Practice Checks

  • Unhealthy Virtual Machines
  • Virtual Machines with Unknown Health Status
  • Azure SQL Server Firewall Allows Broad Range of IPs
  • Azure SQL Server With No Databases
  • Application Gateways With Empty Backend Address Pools
  • Load Balancers With No Rules
  • Load Balancers with All Backend Address Pools Containing No Network Interfaces
  • Unused Network Interfaces

GOOGLE CLOUD UPDATES

You can now add your Google Cloud accounts to CloudCheckr


May 26, 2017

CloudCheckr will be performing a scheduled system update on Friday, May 26, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Updates have been made to the look and feel of the CloudCheckr application:

  • Updated the fonts throughout CloudCheckr
  • Updated the default logo and color scheme
  • Updated the look and feel of the buttons within CloudCheckr

AWS UPDATES

Reorganized the Automation report menu
The Automation menu has been organized by AWS Service.

Added the number of resources within each VPC to the List of VPCs report
A column has been added to the List of VPCs report, showing the number of resources within that VPC. When expanding on any VPC you can also see the total for each resource type, as well as the list of resources within the VPC.

Updated the Spot Management workflow to make it easier to enable on accounts
Enabling and configuring Spot Management has been streamlined. In addition to making it easier to enable the Spotinst add-on, you can also configure CloudCheckr to automatically enable Spot Management on all new accounts created moving forward.

Ability to recalculate Support Charges by Account Family or Manage by AWS Account
A new option, to recalculate support charges by AWS account, has been added to configuring Payee Support Charges within the AWS Partner Tools menu. If this option is selected the payee support charges will be calculated per account, by account. The other option is to calculate the charges against the sum of the account family’s usage.

Added two enhancements to the List Cost Analysis screen:

  • Ability to filter by Custom Charges
  • Ability to view multiple periods

AZURE UPDATES

Improvements to building Multi-Account Views

  • Billing System Selector
    You now have the option to build Mixed, Enterprise Agreement, or CSP multi-account views. Because the data structure for the different types of accounts varies, thiw will allow CloudCheckr to display the most appropriate data when building the reports within the Multi-Account views.
  • Advanced Grouping Improvements
    Based on the billing system selector, the Advanced Grouping report will display the appropriate grouping and filter selection options within the multi-account views.

May 18, 2017

CloudCheckr will be performing a scheduled system update on Thursday, May 18, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added account friendly name to CloudTrail “List of Trails” report
The CloudTrail List of Trails report within Multi-Account Views will now also display the account’s friendly name where the trail resides within the report itself.

Added clarity around CloudWatch and List metrics for S3 summary reports
A warning has been added to the S3 Inventory Summary report, explaining which methods CloudCheckr uses to obtain and report against S3.

AZURE UPDATES

Single month summary now supports multiple currencies
If your Azure cost reports contain multiple currencies, you can now view each of those independently within the Cost > Azure Billing > Summary Reports > Single Month Summary report.

Custom Charges now supports Retail Cost option
When configuring custom billing charges within the Cost > Azure Partner Tools menu, you can now have those custom charges applied to the Azure Retail rate. Using this option will calculate the custom charge from the Azure retail cost, which is based on the rates from Azure Pay As You Go.

Two new Best Practice Checks:

  • Application Gateway using unsecured backend protocol
  • Application Gateway using unsecured protocol

May 12, 2017

CloudCheckr will be performing a scheduled system update on Friday, May 12, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added End Dates to Custom Billing Charges
When configuring Custom Billing Charges, in addition to a Start date, you can now apply an End date. Custom Charges can be configured within the Cost > AWS Partner Tools > Configure menu.

Added combined S3 bucket storage totals to the CloudWatch Historical Export report
Previously you could only obtain the storage per bucket by storage type (Standard, Reduced Redundancy, etc.). Now you retrieve the total storage amount across all types within the Utilization > CloudWatch Historical Export report.

Added support for No Upfront 3 year standard EC2 RIs
Recently AWS announced that its users could purchase No Upfront 3 year standard EC2 reserved instances. Support for those types is now included within CloudCheckr.

Added Last Attached and Created Date to Unattached EBS Volumes BPC
The Unattached EBS Volumes best practice check will now also include the date the volume was last attached as well as its created date. These will help you make more informed decisions on how to proceed with these volumes.

Added friendly account name to the CloudTrail List of Trails report CSV export
The CloudTrail List of Trails report within Multi-Account Views will now also display the account’s friendly name where the trail resides when exporting the data via CSV.

New Best Practice Check:

  • EBS Volumes Attached to Stopped EC2 Instances

AZURE UPDATES

New resource tags tracking reports
There are two new reports to help you monitor and manage your cost tags within Azure.

  • Lookup Resources – This feature allows you to search and view all tags associated with any resource.
  • Tagging Rules – This feature allows you to create rules that will flag resources that do not meet your user-defined tagging requirements.

NOTE: Both can be found under Cost > Tagging within the report navigation. Also, the Improperly Tagged Resources report, where you can see the output of the tag rules, will be available soon.

List Cost Analysis for CSP now groups by Customer
The Azure List Cost Analysis has been reorganized for CSP accounts, grouping by Customer first.

Office 365 subscription information added to billing structure

Drilldown capabilities have been added to the Best Practice report
Azure best practice checks will now have drilldown capabilities, allowing you to get more details about the resources being flagged within each check.

Two new Best Practice Checks:

  • Virtual Machine in a “Deallocated” State
  • Virtual Machines in a “Stopped” state

May 04, 2017

CloudCheckr will be performing a scheduled system update on Thursday, May 04, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Added Aventra IRON to integrations
Aventra™ IRON is a next-gen workload optimization solution that delivers the CloudCheckr promise for improving cloud cost management and asset utilization. You can access Aventra™ IRON through the Integrations menu at the top of the app.

AWS UPDATES

Added Amortization option to cap instance costs at their On-Demand price
You can now configure CloudCheckr to cap the amortization amount, per instance, at its on-demand price. How this feature works is that Amortization is added to each usage row up untill the on-demand cost of the running instance. Any remaining amortization is charged back to the account that purchased the reserved instance.
This third amortization option can be enabled within the AWS Partner Tools > Configure > Configure Custom Cost screen.

Added two new Inventory reports

  • IoT Summary
  • IoT List of Things

Reworked Automation Workflow screen
The Automation Workflow screen has been reworked to make it easier to manage open workflow tasks and review workflow history.

Added Fix Now capabilities to several Best Practice Checks:

  • S3 Buckets with Edit Permissions set to Everyone
  • S3 Buckets with Upload/Delete Permissions for Authenticated Users
  • S3 Buckets with Upload/Delete set to Everyone
  • S3 Buckets with Edit Permissions set to Authenticated Users
  • S3 Buckets With Any Permission Set To Authenticated Users
  • S3 Buckets With ‘List’ Permission Set To Authenticated Users
  • S3 Buckets With ‘List’ Permission Set To Everyone
  • S3 Buckets With ‘View Permissions’ Permission Set To Everyone
  • Publicly Accessible RDS DB Instances
  • SNS Topics with Permission set to Everyone
  • New Best Practice Check: CloudTrail integrated with CloudWatch Logs

AZURE UPDATES

Added Search Tags report
Azure accounts can now view and filter their tag inventory within the Cost > Tagging menu.

Added Budget Alerts by Saved Filters
When configuring budget alerts within the Cost > Alerts menu, you can now base the budget on saved filters.

Added Cost Alerts by comparative fluctuations
Within the Cost > Alerts > Manage menu, there is now the ability to create a cost alert based on cost fluctuations, instead of by budget. This alert will look at the cost over a user-defined period of time and compares that against the average costs over a previous period of time to find fluctuations. The alert can be triggered based on cost or percentage fluctuations.

Collecting Resource Group with billing data
CloudCheckr will now ingest the Resource Group from the Azure usage reports. You will be able to group by, and filter by, these groups within the Advanced Grouping report.

Collecting Blob Storage monitoring metrics
CloudCheckr will now ingest Blog Storage metrics which can be viewed within the Inventory > Storage Accounts reports.


April 27, 2017

CloudCheckr will be performing a scheduled system update on Thursday, April 27, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Ability to whitelabel activation emails
CloudCheckr MSP partners utilizing a whitelabel now have the ability to have their new user activation emails customized. If you would like to customize this email, please contact support@cloudcheckr.com.

AWS UPDATES

New Monthly CPU Utilization report
This new report, within the Utilization > EC2 menu, will provide high-level metrics for the average CPU used across all EC2 instances during each month.

Improvements for EC2 RI Recommendations around flex RIs
We’ve updated the EC2 RI Purchase Recommendation reports to better reflect how they account for flex RI matching.

Amortization will now be calculated during the month
For accounts that have amortizatoin enabled, you can now see the amortization calculated during the month. Previously this was only calculated once the month was finalized.

Added S3 storage metric to CloudWatch Historical Export
You can now see the total S3 storage, by bucket, within the CloudWatch Historical Export report. Previously this was only available for the different storage types.

Security Group alert email improvements
The security group alert emails will now group all changes for each security group together. Previously each change was separate within the email.

Two New API Calls

  • get_custom_charges
  • get_resources_ec2_details_v4

AZURE UPDATES

Added Network Security Group alerts
You can now configure and receive alerts around your Network Security Groups. These can be created and managed within the Security > Alerts menu.

Added location to Change Monitoring
The Azure Change Monitoring report will now include the Location of the resources. This report can be found within the Security > Activity Monitoring menu.

Improvements to the List Cost Analysis report
Drilldowns on each change row have been added to the List Cost Analysis report. This allows users to better understand what was modified by CloudCheckr’s List Cost calculations. The List Cost Analysis report can be found within the Cost > Azure Partner Tools menu within EA and CSP accounts.

Added application gateways to the VM Scale Sets report
A table showing the application gateways has been added to the List of Virtual Machines report found within the Inventory module.

Unified the service names within billing reports
CloudCheckr has unified the service names for billing reports, making it easier to filter and identify Azure costs.

Historical Billing Summary CSV improvements
The subscription Id has been added to the Azure Historical Billing Summary CSV export.


April 21, 2017

CloudCheckr will be performing a scheduled system update on Friday, April 21, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added CloudFormation option for creating new accounts
You can now create accounts in CloudCheckr using IAM roles with CloudFormation. This process allows you to bypass creating and applying an IAM policy to the role. Accounts added through this method will automatically receive the CloudCheckr recommended IAM policy, and won’t have to worry about updating that policy as new features and services are supported within CloudCheckr.

Improved RI Purchase Recommendation check drilldowns
The RI Purchase Recommendation best practice checks will now filter down to the exact recommendation instead of the general report.

Added clarity for IAM Admin best practice checks
The IAM Admin best practice checks have been updated to include information as to what parameters CloudCheckr utilizes to categorize an IAM user as an admin.

New Best Practice Check

  • Multi-Region CloudTrail Enabled

AZURE UPDATES

Added utilization charts to the VM Right-Sizing report
The VM Right-Sizing report now includes utilization charts, graphing the memory and CPU usage for the VM over the past 30 days.

Improved Azure Advisor Check display
The Azure Advisor checks have been reorganized, making it easier to read and locate checks.


April 13, 2017

CloudCheckr will be performing a scheduled system update on Thursday, April 13, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Redesigned Login page
The CloudCheckr login page has been completely redesigned.

Added Support help button into the app
A Support help button has been added to the bottom-right of the app. Clicking the button will redirect the user to the CloudCheckr service desk page, where support tickets can be created.

AWS UPDATES

Added extra encryption to invoices and DBR copies uploaded into S3
CloudCheckr has implemented an extra layer of encryption for objects its uploading into customer S3 buckets. This impacts both invoices being saved to S3 as well as accounts utilizing the Copy DBR function.

Email notification when Advanced Grouping saved filters are built
CloudCheckr can now deliver an email message alerting a user that a newly created saved filter has been fully built. This is managed within the Advanced Grouping report.

Added several additional CIS Benchmarks
The Security > Secure Configuration > CIS Benchmark report has been updated to include several additional benchmarks.

Added filtering options to Automation tasks
Filtering capabilities have been added to the Automation tasks, making it easy to narrow the list of resources to those you’d like to take action against. The Automation tasks can be accessed within the Automation menu.

Added Host to EC2 List of Instances report
The List of EC2 instances report has been updated to include the instance host (if applicable).

AZURE UPDATES

Added List Cost Analysis report
A List Cost Analysis report has been added to the Azure Partner tools menu. This report is designed to show users each cost that was changed by CloudCheckr when calculating List Cost.

Email notification when Advanced Grouping saved filters are built
CloudCheckr can now deliver an email message alerting a user that a newly created saved filter has been fully built. This is managed within the Advanced Grouping report.

Added two new Inventory reports for Virtual Machine Images

  • Virtual Machine Images Summary report
  • List of Virtual Machine Images report

New Azure Advisor check:

  • Use a cost effective solution to manage the performance goals of multiple SQL databases

Added new Best Practice Check:

  • Unused VM images

April 06, 2017

CloudCheckr will be performing a scheduled system update on Thursday, April 06, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Added Dashboard link within accounts
You can now access your Dashboards from within any account in CloudCheckr by clicking on the Dashboard link to the right of the account dropdown. Previously Dashboards could only be accessed from the main list of accounts.

AWS UPDATES

Updated service limits will now be retrieved from Trusted Advisor
CloudCheckr will now leverage Trusted Advisor to obtain the actual service limits for the AWS accounts. These will be updated automatically within CloudCheckr’s best practices report. Previously, users had to manually enter any modified limits beyond the default AWS limits.

EC2 List of Reserved Instances CSV Export improvements
The CSV export from the EC2 List of Reserved Instances report has been updated, breaking apart the Upfront Fee and Upfront Fee Per Instance into their own columns.

Made improvements to CloudTrail Alert Ignores
The CloudTrail alert ignores have been alphabetized, making them easier to modify and manage.

Added configuration options to Stale IAM Users best practice check
A configuration option has been added the Stale IAM Users best practice check, allowing users to determine the time frame before an IAM user is considered “stale”.

AZURE UPDATES

Added Historic Monthly Cost Summary to MAV
The Historic Monthly Summary has been added to the Cost navigation for Azure multi-account views.

Added Daily and Monthly Consolidated Billing Summary email
Within Azure Enterpise Agreement and CSP accounts, a daily and/or monthly consolidated billing summary email can be enabled. This setting is controled within the Account Settings > Email Settings menu.

Added Azure Advisor to best practices report
You can now view the results of your Azure Advisor checks within your CloudCheckr best practice report.

Added networking information to the Virtual Machine Scale Set report
Networking information has been added to the Inventory > Virtual Machine Scale Set report.

Improvements to VM Right-Sizing
The Virtual Machine Right-Sizing report has been enhanced. In addition to displaying cost data, the recommendations will now span VM sizing families.

New best practice check

  • Load Balancers Configured to Use Non-SSL Ports

March 30, 2017

CloudCheckr will be performing a scheduled system update on Thursday, March 30, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Improvements to the Edit Users screen
The Edit Users screen has been updated, including adding a button to show/hide account grid.

AWS UPDATES

Added Allgress Integration
Allgress helps customers map controls to compliance standards like HIPAA and FedRAMP.

Saved Filter invoices can now include additional info in the invoice details
This option, which is controlled by a checkbox, allows customers to have the additional info, populated within Account Families, display next to each account when generating an invoice that is grouped by Account.
Note: This only supports invoices using the Saved Filter report format that are exported to CSV.

Improved Best Practice Check Fix Now capabilities
The Fix Now capabilities within the best practice checks will now show the permissions needed to execute the request and explain what actions CloudCheckr will take.

List Cost Analysis text improvements
The descriptive text within the List Cost Analysis report has been improved for clarity.

AZURE UPDATES

Added Virtual Machine Right-Sizing Report
This new report will look at all available Virtual Machine utilization metrics and make re-sizing recommendations based on usage. Each VM will be given a score based its metrics. Low scores indicate that a VM is under-utilized, while high scores indicate that a VM is over-utilized. This report can be found under the Utilization menu.

Added two new inventory reports for Virtual Machine Scale Sets

  • Virtual Machine Scale Set Summary
  • List of Virtual Machine Scale Sets

Added 4 Best Practice Checks

  • Storage Accounts Without Secondary Locations
  • Idle Virtual Machines
  • Over-Utilized Virtual Machines
  • Redis Caches with non-SSL Port Enabled

March 23, 2017

CloudCheckr will be performing a scheduled system update on Thursday, March 23, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added CIS Benchmark Report
This new report will have CloudCheck compare your AWS account against the Center for Internet Security’s cloud best practices. This report can be found within the Security > Secure Configuration menu.

Reworked report navigation for Reserved Usage
The report menu under Cost > Reserved Usage has been reworked to make it easier to find Invetory reports versus Recommendations.

Added Support for AWS Config Rules in Best Practice Report
An additional tab has been added the Best Practices report showing your AWS Config rules.

Admin Workflow (approval requirement) for Automation tasks can be enabled/disabled
Witin the Automation > Setup menu, you now have the ability to enabled or disable Workflows on your automation tasks and ‘Fix Now’ functions. When enabled, requests must be approved by Workflow Admins. When disabled, the buttons will act as ‘Fix Now’ with CloudCheckr immediately carrying out any automation or fix requests.

Publicly Accessible ELBs added to Perimeter Assessment Report
The Perimeter Assessment report, found under Security > Secure Configuration, now includes publicly accessible Elastic Load Balancers.

Single Month Summary report CSV export has separate columns for AWS Account Id and Friendly Name

Added Fix Now capabilities to Best Practice Report
CloudCheckr now gives you the ability to act on its Best Practice findings and recommendations directly from the report. To use this capability, expand on the check and click the ‘Fix Now’ button to the right of the item you would like CloudCheckr to address. The credentials added to CloudCheckr must have the appropriate permissions to carry out the request.

This functionality is currently supported for the following checks:

  • IAM Password Policy Does Not Require Lowercase Letter
  • IAM Password Policy Does Not Require Non-Alphanumeric Character
  • IAM Password Policy Does Not Require Number
  • IAM Password Policy Does Not Require Uppercase Letter
  • IAM Password Policy Minimum Length Too Short
  • Passwords Not Reset For > 180 Days
  • IAM Password Policy Does Not Have Password Expiration
  • IAM Password Policy Does Not Prevent Password Reuse

AZURE UPDATES

Azure EA billing import now supports API keys created by an Account admin
The Azure Enterprise portal supports creating API keys as an Enterprise Agreement Admin, or as an Account Admin. CloudCheckr now supports both types of key.

Reworked report navigation for Cost
The Cost report navigation has been reworked to provide clarity around the types of reports and functions available.

Added two new inventory reports for Redis Cache
Redis Cache Summary Report
Redis Cache Details Report

Average Memory Percentage For Last 30 Days added to List of Virtual Machines report
The List of Virtual Machines report will now include the Average Memory percentage, over the last 30 days, for the VMs.

New Best Practice Check

  • Storage Account Blob Services without encryption enabled

March 17, 2017

CloudCheckr will be performing a scheduled system update on Friday, March 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Advanced Grouping saved filters now build independent of billing updates
When creating or updating saved filters build in the Advanced Grouping report, the data for the saved filters will be build within its own process. Previously it was part of the general billing update. Separating this will improve the speed of processing billing updates and reloads.

Best Practice Check updated
Renamed “Permissions Granted To IAM Users” best practice check to “IAM Policies Granted To IAM Users”.

AZURE UPDATES

CSP accounts will now report on current month costs
CSP accounts can now report on cost data during each month. Previously it only provided data once a month was closed, through the invoice.
IMPORTANT: To accommodate this change, you need to update the permissions of the CSP user account used by CloudCheckr. This must be changed within the CSP portal. The new permission is the “Admin agent” permission. CSP billing imports (including previous months) will not function until this permission is added.

Added CSV export option to the Advanced Grouping drilldown
Within the Advanced Grouping report, if you click on the chart CloudCheckr will display a drilldown menu allowing you to further filter the report. That menu now includes CSV export capabilities.

Improved the Network Security Group CSV export from multi-account views
When exporting the Network Security Group report to CSV, the export will now contain all available data.

Added support for Subscription Families
You can now create and manage Subscription Families. This allows you to invoice and report on multiple subscriptions for a single customer.

New List of Load Balancers report
Added a List of Load Balancers report to the Inventory > Networking menu.

New Best Practice Check
New Best Practice Check Virtual Machines with Unencrypted Disks.


March 09, 2017

CloudCheckr will be performing a scheduled system update on Thursday, March 09, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

New Summary-Only Option for Best Practice Email
The Best Practices email can now be configured to only send the summary information (name of check and number of issues discovered) leaving out the list of resources.

Automation Task UI Improvements
The look and feel of the Automation tasks have been improved, making them uniform and easier to interact with.

Added AWS Account Id to EC2 Right-Sizing In Multi-Account Views
The EC2 Right-Sizing report within multi-account views now have an AWS account column, showing the account that owns the instance.

Updated Best Practice Check
Enforce SSL connections best practice check has been updated for clarity, and renamed to “RDS DB Instances Not Enforcing SSL Connections”.

AZURE UPDATES

Added Drilldowns to Consolidated Billing Summary
The Consolidated Billing Summary report has been updated to include drilldowns for the subscriptions.

Added Subscription Filter to Single Day Summary Report
The Single Day Summary report has been updated to include a subscription filter.

Redesigned the Configure Azure Account Screen
The configure account screen has been reworked, making it easier to choose the type of Azure account to create within CloudCheckr.

New List of Subnets Report
Added List of Subnets report to the Inventory module, under Networking.


March 03, 2017

CloudCheckr will be performing a scheduled system update on Friday, March 03, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Improvements to User Management
The screens for both creating and editing users now has the AWS accounts and Azure accounts separated by tab. This makes it much easier to find the accounts you’re looking for from the different cloud providers.

AWS UPDATES

EC2 Right-Sizing report added to MAVs
The EC2 Right-Sizing report has been added to multi-account views, allowing you to see all of your right-sizing recommendations in one central location. This report can be found within the Utilization module.

Improvements to the Best Practice Check Editor
The Best Practice Check Editor has been updated. You now have the ability to create multiple policies and choose which accounts adhere to which policy. This editor is accessible only by Admin users, and can be found within the Admin Functions on the main list of accounts.

AZURE UPDATES

Four new reports have been added to multi-account views:

  • Security Module:
    • Perimeter Assessment Report
    • Network Security Group Detail Report
    • Change Monitoring Report
  • Cost Module:
    • Single Day Cost Summary

Added a Consolidated Billing Summary report
The Consolidated Billing Summary Report has been added to Azure Enterprise Agreement accounts. This allows you to see the total cost, across all subscriptions, and by subscription, in a single report.


February 17, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added pricing type trend chart to RDS Summary report
A pricing type usage trend graph has been added to the Spend Analysis > RDS Summary report. This chart will show you the number of On-Demand versus Reserved hours used across RDS over a user-defined time period.

Added a new API call: get_ec2_reserved_instance_rebalancer_ec2_instances_v2
This improves on the get_ec2_reserved_instance_rebalancer_ec2_instances call by adding additional properties to the output:
Public IP Address
Private IP Address
Public DNS Name
Private DNS Name
Status

AZURE UPDATES

Added support for Multi-Account Views for Azure accounts
Multi-Account Views allow you to leverage CloudCheckr to build reports that looks across all, or a subset, of your Azure accounts. Multi-Account Views are created by using Account-Level Tags. To tag an account, load the Account and go to Account Settings > Account Tags. You can assign multiple tags per Account. When creating your Multi-View Account you will select these tags. Alternatively, you can create the Multi-Account View and choose the accounts to build reports.

The first iteration of Azure Multi-Account Views support the Azure Inventory reports.

Added support for importing invoice billing data from the Cloud Solution Provider (CSP) portal
You can now add your Cloud Solution Provider (CSP) accounts to CloudCheckr to manage your costs.

Added the Billing Dashboard
This new report has been added to the Cost module, providing a high-level summary of the monthly Azure costs.

Added a new API call: billing/get_detailed_billing_with_grouping_v2
You can use this new call to query the cost data from your saved filters built within the Advanced Grouping report.


February 10, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 10, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Basic Users can be given access to Email Settings
You can now give your Basic Users access to the Email Settings page. This can be accomplished by leveraging User Groups. When configuring the user group, you can enable the Email Settings option within the Settings tab to let the members of the user group view the Email Settings. To also give them the ability to modify Email Settings you will want to select the Edit Emails checkbox within the Generic tab. Add the Basic Users you would like to have these capabilities to the User Group.

Added the ability to save custom favicons
Admin users can upload their own favicon to the Settings > Customization menu.
Note that the favicon must be an .ico file.

AWS UPDATES

Added daily emails from multi-account view Advanced Grouping report
You can now configure your saved filters from a multi-account view Advanced Grouping report to send daily via email.

Kinesis has been added to Custom Reports
Within the Inventory module you can now create and save the Kinesis List of Streams report to Custom Reports.

AZURE UPDATES

Saved Filters added to the Advanced Grouping report
You can now create Saved Filters, including the performance benefit, within the Azure Advanced Grouping report.


February 3, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 3, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Spotinst Integration
Spotinst is a cloud-cost management platform that helps AWS customers reduce spend while ensuring high availability and performance, by leveraging cloud providers’ excess capacity. This integration allows you to enable and login to Spotinst directly from CloudCheckr.

AZURE FEATURES

Ability to force Azure billing collection
When setting a month to reload within the Reload Usage Report, you can now have CloudCheckr force the billing update to run, ensuring you get your billing updates immediately.

Added last processed data to the Reload Usage Reports screen
You can now see the last time that CloudCheckr processed any historic billing month from the Reload Usage Reports screen.

Added the ability to report on cost data for subscriptions that are not part of an Enterprise Agreement
If you add an Azure subscription to CloudCheckr that is not part of an Enterprise Agreement, CloudCheckr can now retrieve and report on that subscription’s costs.


January 26, 2017

CloudCheckr will be performing a scheduled system update on Thursday, January 26, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Implemented Right-Sizing Workflows
CloudCheckr now gives you the ability to control who can request Right-Sizing modifications, and who can approve and execute those requests. This new feature, called Workflows, will be rolled out to all the automation tasks.

To enable this capability, you must utilize the new User Group functionality. When added account access to a user group, within the Automation tab, you will see two new permissions: Open Workflow and Admin Workflow. Open Workflow is the permission that should be given to users that you would like to submit requests. Users with Admin Workflow permissions will be able to deny or approve the requests. Once a request is approved, CloudCheckr will immediately action that request. Workflows also retain a log, and notes, for any and all changes.

Added Predicted Usage to EC2 List of Instances Export
The export of the EC2 List of Instances report now includes a column for the predicted instance usage.

AZURE FEATURES

Added a Perimeter Assessment Report
Azure Inventory report will now include a Perimeter Assessment report, which will show you all the entry points from the public Internet into your Azure environment. This report can be accessed within the Security > Secure Configuration menu.

Reworked details of Under-Utilized VM best practice check
The details of the Under-Utilized Virtual Machines best practice check has been updated to provide better clarity into the VMs and the metrics CloudCheckr is reporting against.

Improvements to the Virtual Machine utilization reporting
The Virtual Machine utilization reporting has been improved to provide better statistics for your VMs. You can see this data within the Inventory > Virtual Machine > List of Virtual Machines report.


January 20, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 20, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AZURE FEATURES

Added CSV option for Invoice Generator
The invoice generator within Azure accounts now supports the ability to export the invoices in CSV format.

Added Custom Reports to Inventory reports
The Azure Inventory reports will now allow you to save your filter configurations as custom reports. This prevents you from having to rebuild your reports each time you want view them.

New Best Practice Check – Under-Utilized Virtual Machines
A new best practice check has been added to the Usage tab, showing the Virtual Machines that are determined to be under-utilized based on their CPU usage.


January 13, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 13, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Added Untagged Resources report to multi-account views
The Untagged Resources report has been added to multi-account views. This report can be found within the Inventory module.
Newly added accounts will default to the Classic Best Practice report
When new accounts are added to CloudCheckr they will default to the ‘Classic’ best practice view, instead of the Dashboard view.

AZURE FEATURES

Added Best Practice report for Azure
Azure accounts will now have a Best Practice report. There is one best practice check to start (Security Rules Allowing All Inbound Traffic), and additional checks will be added with each update.


January 07, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 07, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Added ability to find security groups with specific port open
The Security Group Common Searches report now has a new option which allows you to find security groups that have specific port open. You can find this report within the Security > Secure Configuration > Security Groups report menu.

AZURE FEATURES

Support for Azure Government
CloudCheckr now supports Azure Government. When adding a new Azure account into CloudCheckr you will choose whether the account is commerial or government.

Added Security Group reports
A new report menu has been added for Azure security group reporting.

Added the ability to group by tag within Advanced Grouping
Azure Advanced Grouping report now allows you to group by tag, in addition to filtering by tag.

Added Virtual Machine History by Instance report
Added a new report within Inventory > Virtual Machine > Trending, that shows Virtual Machine history by instance.


December 29, 2016

CloudCheckr will be performing a scheduled system update on Thursday, December 29, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Updated Bookmark Icon
The bookmark icon has been updated to better reflect that its purpose.

Improved Show/Hide Report Help Text
Reports with help text at the top now have an easily identifiable button to show or hide the text.

AWS Features

Added ability to Lock billing months
In the Reload DBR screen, which is found under Cost > AWS Partner Tools > DBR, you can now lock historic billing months. When a month is locked, its DBR cannot be reloaded, preventing any changes to the cost data. This feature is intended to help reseller customers from adding custom charges or other modifications, and having those applied historically, modifying the numbers after the month has been closed.

Added scoring icons to EC2 Right-Sizing Report
Icons have been added to the EC2 Right-Sizing Report, making it easier to see each instance’s utilization score. This report is found within the Utilization menu.

Added Cost Type option to Dashboard Cost Panes
Dashboard panes for different cost reports now have a Cost Type dropdown, allowing them to be built against Blended, Unblended, or List cost.

‘White List’ has been renamed ‘Ignore List’ in Automation Tasks

New Best Practice Check

  • Auto-Scaling Launch Configuration configured with Previous-Generation instance types

New API call

  • get_best_practices_v2

Azure Features

Cost Budget Alert
You can now configure cost alerts against your Azure subscriptions. The budget alert builder can be found within the Cost menu.

Added Cost Tag Filtering to Advanced Grouping
You can now filter the costs in Advanced Grouping by resource tags. Note: Grouping by tags will be added soon.

Added Resource Group info to reports
You can now see the Resource Group for resources within the Azure inventory reports.

Added Change Monitoring reporting
CloudCheckr will now track when resources are added, modified, or deleted within your Azure accounts. The Change Monitor report can be found within the Inventory menu.

Added additional details to the Virtual Machine Inventory reports
Several additional data points are now present for virtual machines within the Inventory reports.

Added CPU utilization metrics to Virtual Machine reports
CloudCheckr now collects, and reports on, CPU metrics for Azure Virtual Machines.

Added HD Insights to Inventory reports

Added Virtual Networks to Inventory reports


November 26, 2016

CloudCheckr will be performing a scheduled system update on Saturday, November 26, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Reorganized Report Navigation under Security and Partner Tools
Both the Cost > AWS Partner Tools and Security sections of the report navigation have been reorganized for more logical report groupings. The AWS Partner tools menu now makes it easier to know where to go to configure options, versus generating reports, versus managing the DBR. Security is now separated by Secure Configuration reports and Activity Monitoring reports.
NOTE: The Invoice Generator can be found within the Report menu of the AWS Partner Tools.

Payee Support costs now calculate during the month
When configuring Payee Support Charges, you will now see the Costs calculated as the month progresses. Previously these costs would only be calculated one the billing month was finalized.

Payee Support costs can now be applied across all accounts within Account Families
When configuring Payee Support Charges within an Account Family you now have the option to have the total support charge billed to a single account within the Account Family, or spread across each account, based on that account’s usage. This setting is managed within Cost > AWS Partner Tools > Account Families.

Added ability to set available reports within each account
CloudCheckr now allows you to hide entire sections of the report navigation (such as Best Practices, Cost, Inventory, etc.) for each of your accounts. You will be presented with these options when adding new accounts. You can also update existing accounts by loading the account and navigating to Account Settings > Navigation Visibility.
NOTE: This does not override user permissions. Users will still be able to access any reports they have been granted access to.

Added User Groups for easier user management
CloudCheckr now allows you to create user groups, and manage users and permissions at the group level. User Groups will make managing permissions easier, especially for customers with hundreds or thousands of users. When creating Groups you can determine which accounts and reports users within that group will be able to access. Groups are an Admin-only feature, and can be accessed by clicking on the Settings link at the top of the app.

Added Datadog Integration
CloudCheckr has added an integration for Datadog, which allows CloudCheckr to pull metrics from Datadog into your CloudCheckr account. CloudCheckr will use the memory usage metrics from Datadog for better right-sizing reporting. The Datadog integration can be managed within the Account Settings > Integrations > Imports menu.

Idle EC2 Instances report CSV can now be sent via email
When configuring the Utilization > EC2 > Idle Instances report to send a daily email, you can now have CloudCheckr include a CSV of the report in the email.

Added Invoice Generator for Azure billing accounts
Azure Billing accounts will now have access to an Invoice Generator, allowing you to generate invoices for your subscriptions.

CloudTrail Events can now be grouped by region
The CloudTrail Events report (which is now found under Security > Activity Monitoring > AWS API (CloudTrail)) now supports grouping events by Region.

EC2 List of Instances data now includes Source/Dest check and ENI details
Two new datapoints have been added to the Inventory > EC2 > List of Instances report: Source/Dest check and Elastic Network Interface.

Edit Users screen & Admin Email Settings now freeze top of grid when scrolling
The top of the grid is now frozen when scrolling through both the Edit Users screen as well as the Admin Email Settings screen.

Added ability to drill into Adv. Grouping report by clicking on the graph
When generating a report in Advanced Grouping, and choosing Area for the chart type, you can now click on the chart itself to drill into specific datapoints. For example, if you are looking at a cost breakdown by Account and see a spike on a specific day, you can click on that spike and quickly group that day’s data by Service or Description to get a better idea as to the cause of the spike.

Added the ability to search saved filters in Adv. Grouping report
When opening the Saved Filters dropdown in the Advanced Grouping report, you will now have a text box that allows you to easily search through your saved filters.

2 New Dashboard Panes

  • Saved Filter Costs Over Time
  • Best Practice Trends

2 New Best Practice Checks

  • VPC Peering Connections Requester and Peer Not Approved
  • EC2 Instances With Source/Destination Check Set to False

October 19, 2016

CloudCheckr will be performing a scheduled system update on Wednesday, October 19, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

IMPORTANT: Alert emails are now sent from alerts@cloudcheckr.com
Alert emails from CloudCheckr will now be sent from alerts@cloudcheckr.com instead of support@cloudcheckr.com.  This will make it easier to identify and manage these alerts within your inbox.

Alerts in report navigation moved to their respective modules
The report navigation has been reworked, with the various alerts now being placed within their own modules (Cost, Security, Utilization).

Added Best Practice Check Editor
CloudCheckr Admin users will now have the ability to edit the severity level of best practice checks, as well as disable/enable any check.  The Best Practice Editor can be accessed within the Admin Functions dropdown on the main list of accounts.  NOTE: Changes made here will reflect across all accounts.

Ability to choose which order Custom Charges are calculated
When creating monthly percent charge or credit custom charges, you now have the ability to ‘stack’ the custom charges, dictating which order they are applied.  These can be created/managed within the Cost > AWS Partner Tools > Invoice > Custom Billing Charges menu.  To choose an order, first ensure that the Custom charge stacking and ordering option is enabled for the charge, and then enter a value for the order to be applied (1 will be applied first).

RDS List Cost Support added to Account Families
AWS Accounts that are linked together within Account Families will now be able to share their RDS Reserved Instances when CloudCheckr calculates its List Cost.  Account Families can be setup/managed within the Cost > AWS Partner Tools > Invoice menu.

Ability to have invoices saved to an S3 bucket
When scheduling invoices using the Invoice Generator, you now have the ability to have a copy of the invoice uploaded to a user-defined S3 bucket.
NOTE: For this feature to work, the credentials added to the CloudCheckr account must have “s3:PutObject” and “s3:DeleteObject” permissions on the S3 bucket entered.

Ability to add Custom Credit Memos
Within the Cost > AWS Partner Tools > Invoice > Custom Credit Memos report, you will now be able to add custom credits to your account.  Credits added here will show up in all reports in CloudCheckr that reflect credits, and can also be managed within the Assign Credits report.

Ability to have CloudTrail Alerts sent to Lambda
A new notification method has been added to CloudTrail Alerts (which are now found within the Security > Alerts > CloudTrail menu).  You can now enter a valid Lambda function ARN on any alert, and CloudCheckr will send the full event json plus some other useful properties as a payload to the Lambda function.  This function can then be used to take automated action on the alert.
NOTE: For this feature to work “lambda:InvokeFunction” permissions must be added to credentials of this CloudCheckr account.

Redesigned the Map Overlay Report
The Map Overlay report has been redesigned, making it easier to read the map.  There are also drilldown capabilities, leading to the corresponding inventory report for the service/region selected.  This report can be found within the Inventory menu.

Multiple improvements to the Right-Sizing Report

  • Fix Now Button Added – you can now have CloudCheckr automatically stop, resize, and start your EC2 instances based on its right-sizing recommendations.
  • Network utilization added – instance network utilization metrics are now included in the utilization scoring methodology, making for more accurate recommendations.
  • PDF Export added – you can now export the list of recommendations to PDF in addition to CSV.

Historic Month Selector added to the Billing Dashboard
The Billing Dashboard, found under Cost > AWS Billing, now allows you to view the report against historic months.

Chinese Currency displayed in Mutli-Account Views of China Accounts
Multi-Account Views that are based solely on AWS Accounts running within the China region can now have their cost report displaying the proper currency.

New Dashboard Pane – Cost by Service Over Time


September 06, 2016

CloudCheckr will be performing a scheduled system update on Tuesday, September 06, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

New Best Practice Report Dashboard View
In addition to the ‘classic’ view, you can now also view your Best Practice report in a dashboard view. To enable this new view, load the report and in the help text at the top of the page enable the new setting. You can toggle between the classic and dashboard view whenever you’d like.

Added ability to let users select tags for Copy DBR
When configuring a DBR Copy you now have the ability to have CloudCheckr pass through all tags, in-use tags, or user-selected tags when building the copy of the detailed billing report. When selecting the tags the columns will be build in the DBR copy whether there is costs or not.

Added ability to bulk add and edit users
Adding and editing users can both be executed in bulk now. For adding, populate the email field with a comma separated list of users to add. When editing, use the checkboxes on the manage users screen to select the users you would like to edit. Whatever user level, account/report access provided in the form will be applied to all users being added or edited. NOTE: managing users is only available for Admin CloudCheckr users.

Added additional EBS Volume details
Additional data points, including the encrypted attribute, to the List of EBS Volumes report. This report can be found under Inventory > EC2 > EBS.

Added RDS to the RI Savings Report
In addition to EC2, you can now run the RI Historical Savings report against your RDS reserved instances. This report shows you how much you saved by running an instance with reserved pricing as opposed to On-Demand.

Added new EC2 Right Sizing Report
This new report will look at all available CloudWatch metrics and make instance re-sizing recommendations based on usage. Each instance will be given a score based on the collected CloudWatch metrics. Low scores indicate that an instance is under-utilized, high scores indicate that an instance is over-utilized. This report can be found under the Utilization menu.

3 usability updates to the Advanced Grouping report

  • Added ability to filter by resource ID
  • Added option to display/hide items with zero cost
  • Added option to include/exclude chart data in CSV export

Added CSV Export to the IAM Admin Users report
A CSV export has been added to the IAM Admin Users report. This report can be found within the Security menu.

Added ability to filter the EC2 Instance History by Time report by hours
You can now filter the list of running EC2 instances based on hours running within the EC2 Instance History by Time report. This report can be found within the Inventory > Trending menu.

Added many new Dashboard panes
Several new panes have been added to the account dashboard, including CPU Utilization, Cost Savings, and S3 utilization.

Added ability to edit Dashboard panes
You can now edit already-added Dashboard panes by clicking on the Edit icon in the top-right of the pane.

2 new API Calls

  • get_account_email_settings
  • get_account_family_v2

3 new Best Practice checks

  • Unused CloudWatch Alarms
  • IAM Admin Users Not Attested
  • New IAM Admin Users Not Attested

July 29, 2016

CloudCheckr will be performing a scheduled system update on Friday, July 29, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Can now setup Copy DBR by Account Family
In addition to having the ability to have CloudCheckr deliver DBR copies for each individual payee, you can now configure an account family to deliver a DBR copy for the entire family.

Can automatically create a MAV based on an Account Family
When creating or editing an Account Family you now have the ability to have CloudCheckr automatically create a multi-account view made up of the accounts that are part of the Account Family. This setting is configured within the Customer Information section of the Account Families page.

Added RI Purchase Recommendations by Account Family MAV
When create a multi-account view based on an Account Family, CloudCheckr will build RI Purchase Recommendations based on the usage within that family. NOTE: These reports are only available in MAVs tied to an Account Family.

Better visibility into accounts within Account Families
The top of the Account Families page now has a summary table showing the total number of AWS accounts, the total number of Account Families, and the total number of AWS accounts that are not part of an Account Family.

Can now copy the full consolidated DBR
In consolidated payer accounts within CloudCheckr, you now have the ability to have CloudCheckr deliver a copy of the full consolidated DBR to a user-defined S3 bucket. This is configured within the Cost > AWS Partner Tools > DBR > Copy menu.

Can create custom billing charges based on tags
Within the Cost > AWS Partner Tools > Invoice > Custom Billing Charges menu, when using the ‘Add a percent discount or premium for all charges’ option, you can create these custom charges based on tags.

Can select start date for custom billing charges
All custom billing charges allow you to choose the start date for when the custom charges should start being applied to the account.

Added new Cost Alert based on percentages
Within the Alerts > Cost menu, there is now the ability to create a cost alert based on cost fluctuations, instead of by budget. This alert will look at the cost over a user-defined period of time and compares that against the average costs over a previous period of time to find fluctuations.

Added Invoice ID field to invoices
There is now a dedicated Invoice ID field that can be added to invoices. This setting is configured within the Customer Information section of the Account Families page.

Added Due Date to schedule invoices
You can now define a due date on scheduled invoices created within the Invoice Generator.

New Reserved Instance Lifecycle Monitoring Report
Under Cost > Reserved Usage there is a new report named Reserved Instance Lifecycle Monitoring. This report allows you to setup email notifications for any of the various RI-related best practice checks.

Added ‘NOT in this selection’ to the Advanced Grouping report
The Advanced Grouping report now gives you the ability to create filters that will find items that are NOT selected. Previously you could only build reports against selected items.

Added pie chart option to the Advanced Grouping report
Pie charts were added as a chart type option to the Advanced Grouping report.

Added ELBs to Tagged/Untagged Resources Reports
Both the Tagged and Untagged Resources reports, found under the Inventory menu, will report against Elastic Load Balancers.

Account name character limit increased to 256 characters
Previously, accounts added to CloudCheckr needed to have a name that was 30 characters or less. That limit has been increased to 256 characters.

Added 5 new Dashboard panes

  • Cost Savings
  • EC2 CPU Utilization
  • EBS Storage
  • Cost Trending
  • Number of EC2 Instances

Added 5 new API calls

  • get_account_family
  • modify_account_family_copy_dbr
  • get_detailed_billing_with_grouping_v2
  • get_billing_dashboard_v2
  • get_users_v2

June 23, 2016

CloudCheckr will be performing a scheduled system update on Thursday, June 23, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

New S3 Encryption Details Report
The S3 Encryption Details report will scan your S3 buckets to find the total number of encrypted, and unencrypted objects being stored. You are able to run a scan against whichever buckets you want, on-demand. This report is found under the Security module.

edit_credentials API call now supports cross-account roles
When executing the edit_credentials API call, CloudChecck will now accept cross-account role ARNs for the new credentials.

Improvements to the RI Rebalancer report
Several enhancements have been made the RI Rebalancer report and functionality.

Reload DBR can now reprocess months on-demand
A Run Billing Update Now button has been added to the Reload Detailed Billing Report screen. This allows you to force CloudCheckr to reprocess the months designed for reprocessing instead of waiting for the next scheduled update.

Improvements to the RI Historical Savings report
Better month filtering and the Upfront Amortized Costs have been added to the RI Historical Savings report. This report can be found under Cost > Reserved Usage menu.

Policy JSON added to the IAM List of Policies report
You can now see the raw JSON for the policy within the IAM List of Policies report. This can be found within the Inventory > IAM > List of Policies menu.

Improved detection for unused groups for the Cleanup Security Groups task
The Cleanup Security Groups Automation task has been enhanced to provide better validation when building its list of unused Security Groups.

Improved the date search within Search Tags
The Search Tags report, found under Cost > Tags, will has a column listing the last time the tag was found in the data, as well as a search against this value.

 


June 06, 2016

CloudCheckr will be performing a scheduled system update on Monday, June 06, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added alert to detect new tag values within user-define tag keys
There is a new Alert within the Alerts > Cost menu that will notify you if a new tag value is discovered within a user-define tag key. This lets you know if new customers, applications, environments, etc., are being added to your AWS account.

Exported invoices will be saved in Invoice Generator for future retrieval
When you export an invoice CloudCheckr will now retain a copy of that invoice within the Invoice Generator, which can be exported at any point in the future.

Added exports to Route53 Inventory reporting
The Inventory > Route53 reports have been updated with export options.

Added an RI Rebalancer to modify unused reserved instances
CloudCheckr has added a Reserved Instance Rebalancer. This report will find all of your unused EC2 RIs and make a recommendation as to what you can modify to take full advantage of the reservation. There is a ‘Fix’ button which will have CloudCheckr make the Modify RI request on your behalf.

Assign Credits report has a condensed option for easier credit management
The Assign Credits report, within the AWS Partner Tools menu, now has a condensed view, making it easier to assign/apply credits that have been split up amongst several different AWS accounts.

Dashboard management has been redesigned
The CloudCheckr dashboard has been updated to make managing several dashboards easier.

Users can now choose their default dashboards to always display
Within the Dashboards, you can now select up to 5 “default” dashboards which will always display when logging into your CloudCheckr account (your other dashboards will be accessible via the ‘Select Dashboard’ dropdown). You can make a dashboard a “default” dashboard by loading it and navigating to Dashboard Actions > Configure Dashboard.

Added warning to the Invoice Generator for when the month isn’t finalized
CloudCheckr will now warn you if you are trying to export an invoice before the month’s data has been finalized and fully loaded into CloudCheckr.

Added notification email to the Invoice Generator to notify when month is finalized
Within the Invoice Generator there is now a button labeled ‘Email’. If you configure this option, CloudCheckr will send you an alert email once the previous month’s billing data been finalized and fully loaded into CloudCheckr.

Added wildcard functionality to CloudTrail Alert ignores
You can now add an asterisk (*) to CloudTrail Alert ignores to act as a wildcard. This allows you to create ignores such as “arn:aws:iam::12345678:user/awseb*” where automated activity adds new IAM users with the same format, that you want to keep from your alerts.

Added additional data to the SES Summary Inventory report
Additional data and charts have been added to the Inventory > SES > Summary report, including Rejected Emails, Bounced Emails, Complaints, and Delivered Emails.

Added saved filters to the EC2 Instance History Trending reports
You can now save your filter and group options within the Inventory > Trending > EC2 > Instance History reports.

Added the Marketplace report data the Copy DBR
The AWS Marketplace billing report will now also be copied when using the Copy DBR feature.

Improved the CSV export for the Historical Billing Summary report
The CSV export from the Cost > AWS Billing > Summary Reports > Historical has been updated to include the by-Service data.

Added a date filter to the Search Tags report
The Search Tags report, located within Cost > AWS Billing > Tags, now has a date range filter.

Added ‘Match Resources Without Key’ functionality to Tag Mapping
This new Tag Mapping function allows you to specify a specific tag key and automatically map costs that do not have that tag key applied. To utilize this feature you will need to select the ‘Match Resources Without Key’ checkbox in the Tag Mapping report.

Added filtering & scheduling capabilities to the Automation Tasks
Filtering options have been added to the Automation Tasks to make it easier to identify the specific resource you would like to take actions against. You are also now able to configure when, and how frequently your Automation Tasks run.

Added 5 new Best Practice checks

  • Deprecated Oracle Version
  • Publicly Accessible Redshift Clusters With Open Security Group
  • Publicly Accessible RDS DB Instances With Open Security Group
  • S3 Buckets Not Utilizing Network Encryption
  • S3 Buckets Not Utilizing KMS Keys For Encryption

Added 3 new API Calls

  • get_cloudtrail_custom_metric
  • get_resources_route53_hostedzone_details
  • get_resources_route53_healthcheck_details

May 09, 2016

CloudCheckr will be performing a scheduled system update on Monday, May 09, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added Automation Capabilities
Three different automation tasks have been added to CloudCheckr, which will allow you to remove unused resources from your AWS account:

  1. Cleanup Security Groups
    CloudCheckr will detect security groups that are not assigned to any resources and will purge those security groups for you.
    Cleanup Security Groups requires the following IAM permission: “ec2:DeleteSecurityGroup”
  2. Cleanup EBS Volumes
    CloudCheckr will detect Volumes that are older than 4 weeks with a Status that is not “In-Use” and purge those Volumes for you.
    Cleanup Volumes requires the following IAM permission: “ec2:DeleteVolume”
  3. Cleanup Snapshots
    CloudCheckr will detect Snapshots that are older than 8 weeks and purge those Snapshots for you.
    Cleanup Snapshots requires the following IAM permission: “ec2:DeleteSnapshot”

NOTE: You have the option to manually run these tasks yourself, or have CloudCheckr run these automatically.  CloudCheckr will not automatically cleanup any resources unless you explicitly configure the tasks to do so.  If you do not add the delete permissions to your IAM policy, CloudCheckr will not be able to run the tasks manually or automatically.

More control over RI unsharing
There are now multiple options to help you control how CloudCheckr handles RI unsharing with List Cost. In addition to enabling or disabling the feature, you can now choose to unshare RIs for specific AWS accounts, or to have CloudCheckr pass through the Unblended RI costs when credentials are missing for a payee. This can be manage within the Cost > AWS Partner Tools > Invoice > Configure Custom Cost menu.

Added All Payee option to Payee Support Charges
The Payee Support Charges screen now has an “Apply to all payees” button which will have this setting apply to all current, and future payee accounts. This can be manage within the Cost > AWS Partner Tools > Invoice > Payee Support Charges menu.

Added Cost Forecast pane to Dashboard
The Dashboard now has a “Cost Forecast” pane type.

New RI Cost Savings report
A new Reserved Instance Cost Savings report has been added to the Cost > Reserved Usage menu. This report shows you how much you saved by running an instance with reserved pricing as opposed to On-Demand.

New RI Modifications report
The EC2 Reserved Instance Modifications report provides you with a history of the reserved instances you’ve owned that have been modified. It shows you the RI’s original state as well as the new state post-modification. This report can be accessed within the Cost > Reserved Usage > EC2 menu.

New CloudWatch Logs Summary report
The new CloudWatch Logs Summary report provides an overview of the CloudWatch Log Events for the day. This report can be accessed within the Security > CloudWatch Logs menu.

New IAM Admin Users Report
The IAM Admin Users report provides you with a complete list of IAM users that have any administrative permission (such as iam:CreateUser, iam:CreateAccessKey, iam:ChangePassword, etc.). In addition to details about the IAM user, you also have the ability to “attest to” the users, validating whether they should have these permissions or not.

Added Direct Connect Alert
The new Direct Connect alert will check the Direct Connect service every 5 minutes, alerting you with any Direct Connection with a ‘Down’ state is found. This alert can be configured within the Alerts > Utilization menu.

Added Security Group changes Alert
The new Security Group changes alert will alert you if any modifications are made to any security groups, including groups being added or deleted. This alert can be configured within the Alerts > Utilization menu.

Single Day Summary report link to Advanced Grouping
The list of services within the Single Day Summary report, found under Cost > AWS Billing > Summary, will link you directly to the Advanced Grouping report. This is useful in the scenario where you see an unusual number and would like more information. The Advanced Grouping report will be configured to group by Description, filtered to the service and day in question. You simply need to click the Filter button to retrieve the data.

Redesigned Map Overlay and added to MAV
The Map Overlay report has been redesigned to better display the per-region information. This report has also been added to multi-account views and can be found under the Inventory menu.

Added bar and column chart options to Advanced Grouping report
The Advanced Grouping report now has a Chart Type option, where you can choose to display an Area, Bar, or Column chart in your returned data.

Added Summary grouping options to Invoice Generator
Additional grouping options have been added to the Summary invoice within the Invoice Generator. You can now build a Summary invoice that is grouped by Service, Region, or Service and Region.

New API Call to see Alerts Configured
A new API call has been added (alert/get_alerts) that will retrieve the list of configured alerts within an account.

Added throttled events DynamoDB Right Sizing report
The DynamoDB Right Sizing report will now report against the number of throttled events within each DynamoDB table. This report can be found under the Utilization > DynamoDB menu.

Added PDF export to DynamoDB Right Sizing report
The DynamoDB Right Sizing report now has a PDF export button in the top-right of the report.

Added additional notification methods for Best Practice checks
In addition to email, when configuring the notification method for individual Best Practice checks, you can now have your notifications delivered to a Slack channel or to Syslog. These options are managed, per check, within the Best Practice report.

10 New Best Practice Checks

  • S3 Bucket Access Granted To User In A Different AWS Account
  • SQS Queue Access Granted To User In A Different AWS Account
  • IAM Admin User Password Changed
  • Enforce SSL connections
  • Load Balancers Without Access Log Enabled
  • IAM Admin Users Not Utilizing Multi-Factor Authentication
  • New IAM Admin Users Created Or Granted
  • New Access Key(s) Created for IAM User(s)
  • CloudTrail Aggregate Buckets Not Set To Read-Only
  • IAM Admin User Login

April 11, 2016

CloudCheckr will be performing a scheduled system update on Monday, April 11, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

IMPORTANT: Moved Customers from Invoice Generator to Account Families
The Manage Customers tab in the invoice generator has been moved to the AWS Partner Tools > Account Families page. The same functionality exists here, and changes made to Account Families will carry over to the invoice generator.

Added Dashboards to accounts
You now have the ability to create Dashboards around items such as Cost, EC2 Instance Inventory, and Best Practice Checks. When you login to your CloudCheckr account you will see a “+ New Dashboard” button. Click that to get started.

Added ability to ingest custom CloudWatch metrics
CloudCheckr can now ingest on your custom CloudWatch metrics, including memory utilization. These can be enabled/managed within the Utilization > Manage Custom Metrics.
NOTE: You can currently view these metrics within the CloudWatch Historical Export report. They will be added to additional reports with upcoming updates.

Ability to create RDS custom Inventory reports
In addition to EC2, S3, and Workspaces, you can now also create and save custom inventory reports for the RDS service. These reports can be built within the Inventory > Custom Reports > Builder report.

Redesigned the Daily CloudTrail Summary email
The Daily CloudTrail Summary email has been given an update, making it easier to read and understand the data.

New Best Practice Report email frequency delivery settings
In addition to receiving a daily Best Practice email report, you can now choose the frequency of the emails, as well as which day(s) they are delivered. This can be managed within the Settings > Email Settings page.

Added Trusted Advisor option to Best Practice email settings
Within the Settings > Email Settings page you can also choose to include Trusted Advisor checks in the best practice email.

Added wildcard capabilities to Search Tags report
Tags within the Cost > Tags > Search Tags report can now be searched using partial matches.

7 New Security > VPC Reports
Within the Security > VPC menu you will now find reports for:

  • Endpoints
  • Route Tables
  • Virtual Private Gateways
  • NAT Gateways
  • Customer Gateways
  • VPN Gateways
  • Internet Gateways

Added rules to Assign Credits
You can new create rules around assigning credits in order to help you automate their allocation within the Cost > AWS Partner Tools > Invoice > Assign Credits report. These rules are created using Regular Expressions, and they will apply to new credits only.

2 new IAM Inventory reports
Under the Inventory > IAM menu you’ll now see reports for:

  • List of Open ID Connect Providers
  • List of SAML Providers

Added weekly and monthly options to Custom Report emails
In addition to receiving the custom report emails on a daily basis, you can now also receive those on a weekly or monthly basis.

5 new Built-In CloudTrail Alerts

  • New User detected in CloudTrail
  • New IP Address detected in CloudTrail
  • New Event type detected in CloudTrail
  • New Region used
  • New Service used

Added Marketplace report to Export DBR
The Cost > AWS Billing > Other Features > Export DBR report now gives you the option to also export the Marketplace billing report from the account (if one exists).

Added Group By Account option to Savings report in MAVs
When looking at the Savings report in a multi-account view, you now have the option to group the report by Account or by best practice checks.

New CloudWatch app for Splunk
CloudCheckr now offers an app for Splunk, which will allow Splunk to read data from CloudCheckr.

Added 4 new API calls

  • edit_account_email_settings
  • edit_credential
  • copy_user
  • get_cost_saving

March 22, 2016

CloudCheckr will be performing a scheduled system update on Tuesday, March 22, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Payee Support Charge can now be 10% (no $100 minimum)
When configuring Payee Support Charge you now have the option to choose whether to enforce a $100 minimum fee or not. If this option is enabled, and the payee total cost is less than $10k for the month, the payee support charge will be a strict 10% of monthly AWS costs. If the option is disabled, and the payee total cost is less than $10k for the month, the payee support charge will be $100 or 10%, whichever is highest.

Ability to filter payees in Savings Analysis report
In the Savings Analysis report, you now have the ability to filter out whichever payees you’d like from the report’s savings calculations. This allows you to filter out internal accounts, for example, so that your reporting can be more accurate.

Removed items with 0 usage from EC2 Spend Analysis Cost Details report
The EC2 Spend Analysis Cost Details report (found under Cost > Spend Analysis) will no longer display data points where this is no cost or usage.

New Custom Cost options to define “List Cost”
AWS Partners can now define what “List Cost” means within the Cost > AWS Partner Tools > Custom Cost page. You can choose whether to set the cost baseline to Blended or Unblended, and choose whether RI sharing and/or shared tiering discounts are applied.

Added Summary information to EC2 Custom Report emails
EC2 Custom Inventory Report emails will now have a summary table at the top, showing the total cost.

Custom Charges can now be created against items “NOT in this selection”
When creating custom charges within the Cost > AWS Partner Tools > Custom Charge menu, you now have the ability to set those against items NOT in the selection.

3 New Best Practice Checks

  • Blocklisted IP Address Making API Calls
  • Console Logins From Blocked IP Addresses
  • Blocklisted IP In AWS Infrastructure

March 11, 2016

CloudCheckr will be performing a scheduled system update on Friday, March 11, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added CloudWatch Log daily summary emails
You can now configure daily summary emails from your CloudWatch log evens within the Security > CloudWatch Logs > Define Events. These emails can be configured on the Summary Report tab.

Added 12 new built-in events to CloudWatch Logs
12 new built-in events have been added to the Security > CloudWatch Logs > Define Events report.

CloudWatch Logs reports added to multi-account views
CloudWatch Log events from general accounts will rollup and be viewable when looking at multi-account views.

CloudWatch Logs Define Events now has a resource ID parameter
When configuring your CloudWatch Log events you will now have the option to add a resource ID parameter.

Added threshold to fire in CloudWatch Logs Events
When configuring your CloudWatch Log Events you can now set a threshold to fire, dictating how many events need to occur before the event is saved.

Added configuration to “Unused WorkSpace(s)” check to set number of days
The “Unused WorkSpace(s)” best practice check has a new configuration option, allowing you to set how the number of days the check looks for unused workspaces to report against.

Added Redshift Spend Analysis Reports
Under Cost > Spend Analysis > Redshift you will now see a Summary and Details report.

Added Direct Connect inventory reports to multi-account views
In multi-account views you will now find Direct Connect reports under Inventory.

Monthly Billing Summary – added By Service grouping option

Added S3 bucket policy to List of S3 bucket CSV Export
CloudCheckr will now grab your S3 bucket policy, which you can view by exporting, to CSV, from the Inventory > S3 > List of Buckets report.

CloudTrail Alerts can be configured to only trigger when new parameters are discovered
CloudTrail Alerts have a new option that allows you to only have an alert triggered when a new parameter is detected. This allows you to be notified when an event from a new IP, User, Region, etc., is captured by CloudTrail.

CloudTrail Alerts can be configured to trigger without saving results in CloudCheckr
In the CloudTrail Alert Builder you will now have an option to not save the results for the triggered alert in CloudCheckr. This is useful if you are having the alert results delivered to SysLog.

Reorganized the AWS Partner Tools navigation
The Cost > AWS Partner Tools menu has been organized by report type to make it easier to find the features and reports you need.

Added the ability to suppress the due date in invoice generator
The Create Invoice tag of the Invoice Generator now has a checkbox that allows you to suppress the due date from the invoice output.

Added the ability to create custom charges against not-selected AWS services
When creating custom charges within the Cost > AWS Partner Tools > Invoice menu, you can now choose to create custom charges against selected services, or services that are not selected.

New Best Practice Check: S3 Buckets Without Encryption Policy


February 29, 2016

CloudCheckr will be performing a scheduled system update on Monday, February 29, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Added Summary and Detail VPC Peering Connection reports
Under the Security > VPC menu you’ll now see a Summary and Detailed report for VPC Peering Connections.
NOTE: For CloudCheckr to be able to report on this data, you must have "ec2:DescribeVpcPeeringConnections", permissions in your CloudCheckr IAM policy. If you are using the default AWS Read Only policy, this is already included and you won’t need to make any changes.

Added the ability to modify usage rates for custom charges
You can now modify the List Cost per-hour usage rate for your payees. These custom usage rates can be added and managed within the Cost > AWS Partner Tools menu.

Added Lambda Inventory reports
A Lamdba Summary and Detailed report have been added to the Inventory menu.
NOTE: For CloudCheckr to be able to report on this data, you must have "lambda:ListFunctions",, permissions in your CloudCheckr IAM policy.

Added Bucket URL to S3 List of Buckets report
Within the per-bucket details within the S3 List of Buckets report, you will now be able to see the bucket URL. If the bucket is publicly accessible, you can use this URL to access the contents within the bucket.

Added CSV export for Cost Savings report
The Cost Savings report now has a CSV export.

Added select all capabilities to Payee Support Charges
The Payee Support Charges report under the Cost > AWS Partner Tools menu now has select all checkboxes, so you no longer have to check each account individually.

Added List Cost Analysis report
A List Cost analysis report has been added, providing visibility into the modifications CloudCheckr made when calculating list cost. This can be found within the Cost > AWS Partner Tools menu.


February 19, 2016

CloudCheckr will be performing a scheduled system update on Friday, February 19, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Improved the CloudTrail Alert Builder
The UI for the CloudTrail Alert Build (both custom and built-in) has been redesigned, to make it easier to create alerts.

Added summary charts to CloudTrail Alert Results
You now have the ability to add summary charts to the CloudTrail Alert Results report. You can build charts AWS Account, IP Address, Service, etc.

Tweaked CloudTrail Alert emails
Minor updates to the CloudTrail Alert emails to make them easier to read.

Added new DynamoDB Reserved Capacity Summary report
The DynamoDB Reserved Capacity Summary report provides high-level details about the reserved capacity purchased for the DynamoDB service. This report can be found under the Cost > Reserved Usage > DynamoDB menu.

Added new DynamoDB List of Reserved Capacity report
The DynamoDB List of Reserved Capacity report provides details about the reserved capacity purchased for the DynamoDB service. This report can be found under the Cost > Reserved Usage > DynamoDB menu.

Added new DynamoDB Reserved Usage Report
The DynamoDB Reserved Usage report gives visibility into the amount of Reserved Capacity purchased, used, and provisioned, as well as the amount of capacity that is On-Demand. This report can be found under the Cost > Reserved Usage > DynamoDB menu.

Added additional details to Reload DBR
The Reload DBR screen now shows the status of the months being reloaded, as well as the Start and End time for the updates. This page is found under the Cost > AWS Partner Tools menu.

Added ability to Suppress AWS Support in Payee Support Charges
The Payee Support Charges screen now has a second checkbox to have CloudCheckr suppress AWS Support Charges being written to the account if you want to use the CloudCheckr Payee Support Charge feature. This ensures the accounts do not get double-billed for support.

Added Exports to the Cost Savings report
The Cost Savings report now has a PDF export.

Added additional grouping options to Monthly Summary Report
Under Cost > Summary Reports > Monthly, you now have the ability to group the data by Account, by Account / Service, or by Day / Service.

Added ability to add monthly custom charges by service
You can now have custom monthly charges applied to specific AWS services (whereas before they were against the entire account). These can be added/managed under the Cost > AWS Partner Tools menu.

Added Slack and Syslog integration into CloudWatch Logs
You can now have your CloudWatch Logs Events delivered to a Slack Channel or to Syslog. You can set these up under Security > CloudWatch Logs.

Added instance ID to CloudWatch Logs raw data
The raw data in the CloudWatch Logs results not includes instance ID(s).

Added check Ids to the output of the “get_best_practices” API call
The output for the “get_best_practices” API call will now include XXX


January 22, 2016

CloudCheckr will be performing a scheduled system update on Friday, January 22, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

Enhancements to CloudTrail Alerts:
-Added ability to deliver notifications to Slack and Syslog: You can now have your CloudTrail alerts delivered to a Slack Channel or Syslog Host.
-Added new Response Type to differentiate between Errors and Unauthorized Access Attempts

New Cost Dashboard report
This new Cost Dashboard report, which will be listed under the Cost > AWS Billing menu, will display graphs showing spend summary and a cost breakdown by service.

Added ability to choose which credits to funnel to payee accounts
In payer accounts, within the Cost > AWS Partner Tools > Assign Credits page, you can choose to assign credits to payees, as well as choose whether the credits should funnel down to the payee account reports.

Added ability to view custom charges in payee summary reports
Custom charges added in the Cost > AWS Partner Tools > Custom Billing Charge menu will not display in the payee account’s summary reports.

Added new DynamoDB right-sizing report
This new report recommends the proper number of provisioned reads and writes for each of your DynamoDB tables, based on their consumed usage. This report can be found under Utilization > DynamoDB.

Added support for aggregated AWS Config buckets
CloudCheckr now support AWS Config logs being stored in aggregated S3 buckets. These must be setup within multi-account views in CloudCheckr, under the Security > AWS Config > Aggregated S3 Buckets > Configure.

Added ability to add payee accounts without credentials to populate cost reports
When configuring new accounts in CloudCheckr, you will now see a third option named “Map to Payer”. This option allows you to add a payee account without connecting the account to AWS (as long as the payer is already added to CloudCheckr). CloudCheckr will build the payee account cost reports only, allowing you to grant access to payees to manage their costs without asking them to hand over AWS credentials. If you would like additional security and inventory reporting credentials can be added to this account at any time.

Added reset password email link to the list of users page
When editing users, CloudCheckr Administrators now have the ability to automatically email someone a forgot password link.

ElastiCache & Redshift List of Reserved Instances report now looks across consolidated accounts
Both ElastiCache and Redshift List of Reserved Instances reports will display purchased RIs across all consolidated accounts, when looking at the report at the master payer level (as long as the payees have been added into CloudCheckr). You can find these reports under Cost > Reserved Usage > ElastiCache & Redshift.

Invoice Generator description text now honors hard line breaks
When adding descriptions to the Invoice using the Invoice Generator, line breaks will be properly reflected in the output.

Added Cost Savings report to multi-account views
The Cost Savings report has now been added to multi-account views. You will find this report above Best Practices in the report navigation.

2 new API calls
These new calls allow you to add or delete account-level tags to be used with multi-account views:

  • account/add_tag
  • account/delete_tag

New Best Practice Check: EC2 Reserved Instances With Unused Hours


January 05, 2016

CloudCheckr will be performing a scheduled system update on Tuesday, January 05, 2016. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr performs its next scan of your AWS deployment.

Details of the update:

The color of the app’s green bar can now be customized
Within the Settings menu at the top of the CloudCheckr app you can now control the color of the green bar that spans the app.

Added tags to API call get_resources_ec2_load_balancer_details
The output from the inventory.xml/get_resources_ec2_load_balancer_details API call will now include the resource tags for the ELBs.

Added Committed Amount to EC2 RI Purchase (Frequency) report
The EC2 Reserved Instance Purchase Recommendation (by Frequency) report will now show the total committed amount for the recommendations. You can find this report within the Cost > Reserved Usage > EC2 menu.

Improvements to the Idle DynamoDB Tables best practice check
The Idle DynamoDB Tables best practice check will now clearly show the provisioned/consumed/utilized percentage details for both reads and writes for each “idle” table.

Ordered the filters and columns in the EC2 and RDS List of RIs reports
The columns in List of Reserved Instances reports, for both EC2 and RDS, have been reordered to make it easier to read and understand the report.

Custom Charges can be added against List or Unblended totals
When adding custom charges based on percentage (under Cost > AWS Partner Tools > Custom Charges), you now have the option to have those charges based off of the Unblended total or the List Cost total.


You can find earlier updates here:

2015 Updates
2014 Updates
2013 Updates

Leave a Reply