cloudburn
Open-source policy engine that blocks bad AWS spending patterns before they ship and remediates what's already burning.
File Explorer
Download Latest Version (.zip)- SKILL.md
- condition-based-waiting-example.ts
- condition-based-waiting.md
- CREATION-LOG.md
- defense-in-depth.md
- find-polluter.sh
- root-cause-tracing.md
- SKILL.md
- test-academic.md
- test-pressure-1.md
- test-pressure-2.md
- test-pressure-3.md
- openai.yaml
- mocking.md
- SKILL.md
- tests.md
- turborepo.md
- dependencies.md
- packages.md
- RULE.md
- structure.md
- RULE.md
- gotchas.md
- remote-cache.md
- RULE.md
- github-actions.md
- patterns.md
- RULE.md
- vercel.md
- commands.md
- RULE.md
- global-options.md
- gotchas.md
- RULE.md
- tasks.md
- gotchas.md
- modes.md
- RULE.md
- patterns.md
- RULE.md
- RULE.md
- SKILL.md
- config.json
- roadmap
- systematic-debugging
- tdd
- turborepo
- bug_report.yml
- config.yml
- feature_request.yml
- ci.yml
- pull-request-lint.yml
- release.yml
- pull_request_template.md
- commit-msg
- validate-commit-msg.mjs
- .gitkeep
- .gitkeep
- docker-compose.yml
- cli.md
- rules.md
- sdk.md
- adding-a-provider-resource.md
- adding-a-rule.md
- adding-a-static-dataset.md
- local-development.md
- releasing.md
- commands.md
- config-schema.md
- finding-shape.md
- generated-files.md
- rule-ids.md
- ARCHITECTURE.md
- README.md
- TESTING.md
- .gitkeep
- cloudburn-discover-demo.gif
- cloudburn-gh-banner.png
- cloudburn-scan-demo.gif
- completion.ts
- config-options.ts
- config.ts
- discover.ts
- estimate.ts
- rules-list.ts
- scan.ts
- engine.ts
- shell.ts
- error.ts
- output.ts
- shared.ts
- cli.ts
- debug.ts
- exit-codes.ts
- help.ts
- index.ts
- policy.ts
- progress.ts
- cli-entrypoint.test.ts
- cli.test.ts
- commands.test.ts
- completion.test.ts
- config.e2e.test.ts
- discover.e2e.test.ts
- formatters.test.ts
- help.e2e.test.ts
- misc-commands.e2e.test.ts
- rules-list.e2e.test.ts
- scan-static.e2e.test.ts
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- package.json
- README.md
- tsconfig.json
- tsup.config.ts
- turbo.json
- vitest.config.ts
- caching-disabled.ts
- index.ts
- distribution-pricing-class.ts
- index.ts
- unused-distribution.ts
- index.ts
- redundant-global-trails.ts
- redundant-regional-trails.ts
- index.ts
- log-group-no-metric-filters.ts
- log-group-retention.ts
- unused-log-streams.ts
- full-month-cost-changes.ts
- index.ts
- exceeded-budgets.ts
- index.ts
- missing-anomaly-detection.ts
- missing-budgets.ts
- autoscaling-range-fixed.ts
- index.ts
- stale-table-data.ts
- table-without-autoscaling.ts
- unused-table.ts
- attached-to-stopped-instances.ts
- gp3-extra-iops.ts
- gp3-extra-throughput.ts
- high-iops-volume.ts
- index.ts
- large-volume.ts
- low-iops-volume.ts
- snapshot-max-age.ts
- unattached-volume.ts
- volume-type-current-gen.ts
- detailed-monitoring-enabled.ts
- graviton-review.ts
- idle-nat-gateway.ts
- inactive-vpc-interface-endpoint.ts
- index.ts
- large-instance.ts
- long-running-instance.ts
- low-utilization.ts
- preferred-instance-families.ts
- preferred-instance-types.ts
- reserved-instance-expiring.ts
- reserved-instance-recently-expired.ts
- s3-interface-endpoint.ts
- stopped-instance.ts
- unassociated-elastic-ip.ts
- index.ts
- missing-lifecycle-policy.ts
- missing-tagged-image-retention-cap.ts
- missing-untagged-image-expiry.ts
- graviton-review.ts
- index.ts
- low-cpu-utilization.ts
- service-autoscaling-policy.ts
- graviton-review.ts
- index.ts
- idle-cluster.ts
- index.ts
- node-type-current-gen.ts
- reserved-coverage.ts
- shared.ts
- alb-without-targets.ts
- classic-without-instances.ts
- gateway-without-targets.ts
- idle.ts
- index.ts
- network-without-targets.ts
- shared.ts
- idle-cluster.ts
- index.ts
- previous-generation-instance-types.ts
- cost-optimal-architecture.ts
- excessive-timeout.ts
- high-error-rate.ts
- index.ts
- memory-overprovisioning.ts
- provisioned-concurrency-configured.ts
- graviton-review.ts
- idle-instance.ts
- index.ts
- low-cpu-utilization.ts
- manual-snapshot-max-age.ts
- performance-insights-extended-retention.ts
- preferred-instance-classes.ts
- preferred-instance-families.ts
- reserved-coverage.ts
- stopped-instance.ts
- storage-type-current-gen.ts
- unsupported-engine-version.ts
- unused-snapshots.ts
- index.ts
- low-cpu.ts
- pause-resume.ts
- reserved-coverage.ts
- health-check-unused.ts
- index.ts
- record-higher-ttl.ts
- incomplete-multipart-upload-abort.ts
- index.ts
- intelligent-tiering-recommendation.ts
- missing-lifecycle-config.ts
- shared.ts
- storage-class-optimization.ts
- versioned-bucket-noncurrent-version-cleanup.ts
- idle-endpoint.ts
- index.ts
- running-notebook-instance.ts
- index.ts
- secret-unused.ts
- index.ts
- untagged-resources.ts
- index.ts
- index.ts
- index.ts
- aws-core.ts
- helpers.ts
- metadata.ts
- index.ts
- apigateway-caching-disabled.test.ts
- cloudfront-distribution-pricing-class.test.ts
- cloudfront-unused-distribution.test.ts
- cloudtrail-redundant-global-trails.test.ts
- cloudtrail-redundant-regional-trails.test.ts
- cloudwatch-log-group-no-metric-filters.test.ts
- cloudwatch-log-group-retention.test.ts
- cloudwatch-unused-log-streams.test.ts
- cost-optimal-architecture.test.ts
- costexplorer-full-month-cost-changes.test.ts
- costguardrails-exceeded-budgets.test.ts
- costguardrails-missing-anomaly-detection.test.ts
- costguardrails-missing-budgets.test.ts
- dynamodb-autoscaling-range-fixed.test.ts
- dynamodb-stale-table-data.test.ts
- dynamodb-table-without-autoscaling.test.ts
- dynamodb-unused-table.test.ts
- ebs-attached-to-stopped-instances.test.ts
- ebs-gp3-extra-iops.test.ts
- ebs-gp3-extra-throughput.test.ts
- ebs-high-iops-volume.test.ts
- ebs-large-volume.test.ts
- ebs-low-iops-volume.test.ts
- ebs-snapshot-max-age.test.ts
- ebs-unattached-volume.test.ts
- ec2-detailed-monitoring-enabled.test.ts
- ec2-graviton-review.test.ts
- ec2-idle-nat-gateway.test.ts
- ec2-inactive-vpc-interface-endpoint.test.ts
- ec2-large-instance.test.ts
- ec2-long-running-instance.test.ts
- ec2-low-utilization.test.ts
- ec2-preferred-instance-type.test.ts
- ec2-reserved-instance-expiring.test.ts
- ec2-reserved-instance-recently-expired.test.ts
- ec2-s3-interface-endpoint.test.ts
- ec2-stopped-instance.test.ts
- ec2-unassociated-elastic-ip.test.ts
- ecr-missing-lifecycle-policy.test.ts
- ecr-missing-tagged-image-retention-cap.test.ts
- ecr-missing-untagged-image-expiry.test.ts
- ecs-graviton-review.test.ts
- ecs-low-cpu-utilization.test.ts
- ecs-service-autoscaling-policy.test.ts
- eks-graviton-review.test.ts
- elasticache-idle-cluster.test.ts
- elasticache-node-type-current-gen.test.ts
- elasticache-reserved-coverage.test.ts
- elb-alb-without-targets.test.ts
- elb-classic-without-instances.test.ts
- elb-gateway-without-targets.test.ts
- elb-idle.test.ts
- elb-network-without-targets.test.ts
- emr-idle-cluster.test.ts
- emr-previous-generation-instance-types.test.ts
- exports.test.ts
- lambda-excessive-timeout.test.ts
- lambda-high-error-rate.test.ts
- lambda-memory-overprovisioning.test.ts
- lambda-provisioned-concurrency-configured.test.ts
- live-resource-bag.test.ts
- rds-graviton-review.test.ts
- rds-idle-instance.test.ts
- rds-low-cpu-utilization.test.ts
- rds-manual-snapshot-max-age.test.ts
- rds-performance-insights-extended-retention.test.ts
- rds-preferred-instance-class.test.ts
- rds-reserved-coverage.test.ts
- rds-stopped-instance.test.ts
- rds-storage-type-current-gen.test.ts
- rds-unsupported-engine-version.test.ts
- rds-unused-snapshots.test.ts
- redshift-low-cpu.test.ts
- redshift-pause-resume.test.ts
- redshift-reserved-coverage.test.ts
- route53-health-check-unused.test.ts
- route53-record-higher-ttl.test.ts
- rule-metadata.test.ts
- s3-incomplete-multipart-upload-abort.test.ts
- s3-intelligent-tiering-recommendation.test.ts
- s3-missing-lifecycle-config.test.ts
- s3-storage-class-optimization.test.ts
- s3-versioned-bucket-noncurrent-version-cleanup.test.ts
- sagemaker-idle-endpoint.test.ts
- sagemaker-running-notebook-instance.test.ts
- secretsmanager-secret-unused.test.ts
- tagging-untagged-resources.test.ts
- volume-type-current-gen.test.ts
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- package.json
- README.md
- tsconfig.json
- tsup.config.ts
- turbo.json
- vitest.config.ts
- defaults.ts
- loader.ts
- merge.ts
- schema.ts
- validate.ts
- group-findings.ts
- registry.ts
- run-live.ts
- run-static.ts
- cloudformation.ts
- index.ts
- result.ts
- suppressions.ts
- terraform-lexer.ts
- terraform.ts
- types.ts
- apigateway.ts
- cloudfront.ts
- cloudtrail.ts
- cloudwatch-logs.ts
- cloudwatch.ts
- cost-explorer.ts
- cost-guardrails.ts
- dynamodb.ts
- ebs.ts
- ec2-elastic-ips.ts
- ec2-nat-gateways.ts
- ec2-reserved-instances.ts
- ec2-utilization.ts
- ec2.ts
- ecr.ts
- ecs-autoscaling.ts
- ecs-cluster-metrics.ts
- ecs.ts
- eks.ts
- elasticache.ts
- elbv2.ts
- emr.ts
- lambda.ts
- rds-activity.ts
- rds.ts
- redshift.ts
- route53.ts
- s3-analysis.ts
- s3.ts
- sagemaker.ts
- secretsmanager.ts
- tagging.ts
- utils.ts
- vpc-endpoints.ts
- client.ts
- discovery-registry.ts
- discovery.ts
- errors.ts
- index.ts
- resource-explorer.ts
- static-registry.ts
- static.ts
- barrel-contract.ts
- built-in-rules.ts
- debug.ts
- index.ts
- policy.ts
- scanner.ts
- types.ts
- ebs-volume.json
- ebs-volume.yaml
- ec2-instance.yaml
- intrinsics.yaml
- invalid-template.yaml
- not-template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- invalid-template.yaml
- main.tf
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- main.tf
- template.yaml
- broken.tf
- valid.tf
- main.tf
- main.tf
- main.tf
- notes.txt
- variables.tf
- aws-mixed.tf
- ebs-gp2.tf
- ebs-nested-type.tf
- aws-apigateway-resource.test.ts
- aws-client-credentials.test.ts
- aws-client.test.ts
- aws-cloudfront-resource.test.ts
- aws-cloudtrail-resource.test.ts
- aws-cloudwatch-logs-resource.test.ts
- aws-cloudwatch-resource.test.ts
- aws-cost-explorer-resource.test.ts
- aws-cost-guardrails-resource.test.ts
- aws-discovery.test.ts
- aws-dynamodb-resource.test.ts
- aws-ebs-resource.test.ts
- aws-ec2-elastic-ips-resource.test.ts
- aws-ec2-nat-gateways-resource.test.ts
- aws-ec2-reserved-instances-resource.test.ts
- aws-ec2-resource.test.ts
- aws-ec2-utilization-resource.test.ts
- aws-ecr-resource.test.ts
- aws-ecs-autoscaling-resource.test.ts
- aws-ecs-cluster-metrics-resource.test.ts
- aws-ecs-resource.test.ts
- aws-eks-resource.test.ts
- aws-elasticache-resource.test.ts
- aws-elb-resource.test.ts
- aws-emr-resource.test.ts
- aws-lambda-resource.test.ts
- aws-rds-activity-resource.test.ts
- aws-rds-resource.test.ts
- aws-redshift-resource.test.ts
- aws-resource-explorer.test.ts
- aws-resource-utils.test.ts
- aws-route53-resource.test.ts
- aws-s3-resource.test.ts
- aws-sagemaker-resource.test.ts
- aws-secretsmanager-resource.test.ts
- aws-static.test.ts
- aws-tagging-resource.test.ts
- aws-vpc-endpoints-resource.test.ts
- config.test.ts
- exports.test.ts
- group-findings.test.ts
- parsers.test.ts
- policy.test.ts
- registry.test.ts
- scanner.test.ts
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- package.json
- README.md
- tsconfig.json
- tsup.config.ts
- turbo.json
- vitest.config.ts
- check-docs.mjs
- valid.json
- docs-check.test.mjs
- .gitignore
- .npmrc
- .nvmrc
- AGENTS.md
- biome.jsonc
- CLAUDE.md
- CONTRIBUTING.md
- LICENSE
- package.json
- pnpm-lock.yaml
- pnpm-workspace.yaml
- README.md
- skills-lock.json
- tsconfig.base.json
- turbo.json
π Installation Guide
1. Get the code
git clone https://github.com/towardsthecloud/cloudburn
Downloads the entire project code from GitHub to your computer.
cd cloudburn
Moves into the project folder you just downloaded.
2. Official Install Script
Easy RecommendedPrerequisites
brew install towardsthecloud/tap/cloudburn
Installs the pre-built package via Homebrew β no source build required.
npm install --global cloudburn
Installs the package published on the npm registry globally β no need to clone the source.
After installing, open a new terminal and run the program's version command (e.g. --version) to confirm it worked.
Pulled directly from this repo's README.
3. Docker
EasyPrerequisites
- Git Needed to download the project code from GitHub.
- Docker Desktop Needed to build and run containers. Install it and keep it running in the background.
docker compose -f deploy/docker-compose.yml up -d --build
Runs the command against the services defined in the compose file.
Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.
4. Node.js
EasyPrerequisites
npm install --global cloudburn
Installs the package published on the npm registry globally β no need to clone the source.
After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.
Pulled directly from this repo's README.
// repository documentation
Was this content helpful?
(0 ratings)