# Cloud_CTRL

> What you spend, who owns it and what is exposed, across every account in your AWS Organization. It runs in your own AWS account, read-only, and your AWS data stays there.

Cloud_CTRL is an AWS visibility dashboard for the people who answer for an AWS Organization: CEOs, CTOs, CFOs and cloud leads. Each page opens with a verdict in plain language, states what every figure is compared against, and lets the reader go underneath it to the accounts, services and resources that carry it.

It is deployed into the customer's own AWS account and reads the organization through a read-only role the customer grants and can revoke. Figures are cached in that account, encrypted at rest, and refreshed every 4 hours. No copy of the bill, the inventory or the findings is held anywhere else.

It reads from Cost Explorer, Organizations, AWS Config, Security Hub, AWS Health, IAM & Access Analyzer, Compute Optimizer, Anthropic Admin API.

## Pages

- [Costs](https://cloudctrl.dev/#costs): Run rate, pace against the window before it, and the services and accounts carrying the movement.
- [Cost Attribution](https://cloudctrl.dev/#cost-attribution): You declare the tags that count. Every taggable resource is scored against them, and what is left unowned is priced.
- [AI Spend](https://cloudctrl.dev/#ai-spend): Bedrock on the bill and Claude bought direct from Anthropic, summed across all four token types.
- [Security](https://cloudctrl.dev/#security): Open findings by severity, the accounts not reporting at all, and the identity hygiene behind them.
- [Governance](https://cloudctrl.dev/#governance): Whether the guardrails held, on a timeline that says which day it was and what it was.
- [Resources](https://cloudctrl.dev/#resources): Everything you are running, by type, account and Region, down to the row and the tag it is missing.

## Solutions

- [For the CFO](https://cloudctrl.dev/solutions/cfo/): Where this month's AWS spend will land, what moved it and which spend has no owner, in money, across every account in your AWS Organization.
- [For the CTO](https://cloudctrl.dev/solutions/cto/): What changed, what is exposed and whether the guardrails held, across every account in your AWS Organization, each with the evidence underneath.
- [For cloud leads](https://cloudctrl.dev/solutions/cloud-leads/): The resources behind every figure your leadership reads: tag compliance, savings, AWS Health events and accounts not reporting, across your AWS Organization.
- [Monthly review](https://cloudctrl.dev/solutions/monthly-review/): The figures a monthly AWS cost review asks for, already read, compared and judged when the meeting starts, from one source for everyone in the room.
- [Board reporting](https://cloudctrl.dev/solutions/board-reporting/): AWS cost, security and governance figures that state what they are compared against and where they were read, so the number in the pack matches the screen.

## Assurance

- [Where it runs](https://cloudctrl.dev/#where-it-runs): Deployed into your AWS account and Region, read-only, encrypted at rest in your account, revocable in one action.
- [The read-only role](https://cloudctrl.dev/assurance/read-only-role/): The one IAM role in your management account: what it reads, what it cannot do, and how to remove it.
- [Architecture](https://cloudctrl.dev/assurance/architecture/): One deployment in one account of your organization, and exactly what crosses its boundary.
- [Data residency](https://cloudctrl.dev/assurance/data-residency/): What Cloud_CTRL stores, for how long, and in which Region of your account.
- [Requirements](https://cloudctrl.dev/assurance/requirements/): The one thing your organization must have, and the settings that each turn on part of the product.

## Reference

- [Glossary](https://cloudctrl.dev/glossary/): What pace, run rate, commitment coverage, untagged cost exposure and the other terms on the dashboard mean, and how each figure is worked out.
- [Office Hours](https://cloudctrl.dev/office-hours/): Recurring sessions where your team and a senior AWS Solution Architect review real findings from your own environment against the month's topic.

## Services

- [Cloud Saver](https://cloudctrl.dev/cloud-saver/): 30% off eligible AWS compute, after our share. We hold the Savings Plans and Reserved Instances across a pool of companies, and you commit to nothing.
- [Landing Zone](https://cloudctrl.dev/landing-zone/): A compliant, multi-account AWS environment on Control Tower, hardened with security services and guardrails, deployed and owned by us from day one.

## Pricing

- [Pricing](https://cloudctrl.dev/pricing/): Start free with one AWS invoice, Cloud Saver and the Cloud_CTRL dashboard. Essentials and Pro add a secure landing zone and senior AWS architects.

## Contact

- [Book a walkthrough](https://bookings.cloud.microsoft/bookwithme/user/40722707542b4a15915b88e19a5b4e78@k3nordic.com/meetingtype/PZh0tAP1A0anS9sCzJRZGQ2?anonymous&ismsaljsauthenabled&ep=mcard): 30 minutes of one engineer to point it at your organization.