August 2021 Summaries

Vantage has developed a streamlined process for connecting multiple AWS member accounts using CloudFormation StackSets, enhancing the onboarding experience for users by automating the connection of member accounts to a centralized root account. This approach addresses the challenge of manually connecting numerous accounts, which can be cumbersome and time-consuming, by utilizing StackSets that allow the deployment of the same CloudFormation Stack across multiple accounts. By employing the "service-managed" permission mode, organizations with AWS Organizations already configured can benefit from automatic connection of new member accounts without additional setup. While there is no console UI integration for this process, the use of AWS CLI commands and quick-create links simplifies the setup for users. This automation not only improves security and cost allocation practices but also facilitates independent team operations within larger AWS environments, providing a nearly "1-click" experience for users managing extensive cloud resources.

Amazon S3 Intelligent-Tiering is an automated service designed to optimize storage costs by shifting S3 objects between different storage classes based on access patterns. While it can potentially save over 50% on storage costs, depending on how frequently data is accessed, there are associated fees and scenarios where costs may actually increase. The service monitors access patterns and transitions objects to less expensive storage tiers like Infrequent Access, Archive Instant Access, Archive Access, and Deep Archive Access, each offering different savings compared to the standard storage class. However, the initial setup may result in higher costs due to monitoring fees, and significant savings are typically realized over several months. The effectiveness of S3 Intelligent-Tiering largely depends on the number of objects being monitored and their access frequency, with the potential for substantial savings if objects are seldom accessed.

Amazon CloudWatch is an observability tool designed to monitor cloud infrastructure by aggregating logs and metrics in a central datastore, offering visualization tools to help detect service issues. It emphasizes the three pillars of observability: metrics, logs, and traces, with traces available through AWS X-Ray. CloudWatch pricing is based on data ingestion, retention, and management, with a free tier offering limited service allowances before transitioning to a paid tier. Metrics pricing depends on the number and frequency of tracked custom metrics, with volume discounts available for large enterprises. Basic monitoring provides core metrics for services like EC2 without charge, while detailed monitoring offers higher resolution at a cost. Custom metrics incur charges based on the number of API calls and dimensions. CloudWatch Metrics' data retention policy aggregates data over time, balancing data fidelity with cost. Best practices suggest prioritizing monitoring for mission-critical services while minimizing unnecessary metrics, with a focus on balancing data detail against cost efficiency.

Vantage has launched the beta version of its Cost Report API, allowing users to programmatically access structured cost data from Vantage without additional charges. This new feature addresses previous challenges faced by teams who had to manually extract AWS cost data or write custom scripts for integration into accounting or analysis systems, often incurring costs with AWS Cost Explorer API. By enabling users to create specific Cost Reports through the Vantage console, the API provides a unified and free method to query service-level cost data in JSON format, creating a single source of truth that mirrors the Vantage Console view. This functionality is available to any Vantage user with a connected AWS account, although users must remain within their tier limits to avoid errors. While the API currently supports cost data retrieval at a daily granularity, future enhancements are planned, including cost report creation via the API, access to AWS service cost subcategories, and forecasted costs.

Vantage has announced its inclusion in the AWS Partner Network as an Independent Software Vendor (ISV) Partner, having successfully completed the Foundational Technical Review to meet AWS's best practices in security, reliability, and operational excellence. This partnership builds on Vantage's previous collaboration with AWS as an AWS Marketplace Partner, and it reflects the company's ongoing commitment to enhancing its cloud cost management solutions. Additionally, Vantage has achieved several milestones, including being listed in the Databricks MCP Catalog and Marketplace, launching Remote Instances MCP Server, becoming a FinOps Certified Platform, and achieving SOC 1 Type 2 compliance, all of which underscore its dedication to providing comprehensive cloud optimization tools.

Vantage outlines its secure method for connecting to customer AWS accounts using Cross-Account IAM Roles, enhancing security and efficiency over initial methods that required customers to create an IAM User with access keys. This approach involves creating a role in the customer's AWS account with specific permissions, allowing Vantage to assume the role temporarily, thereby providing secure, manageable access that can be easily revoked by the customer. The process also incorporates an External ID to prevent unauthorized access through the "confused deputy problem," ensuring that only valid connections are made. Vantage emphasizes maintaining a seamless developer experience by automating much of the setup process with AWS CloudFormation and SNS Custom Resources, facilitating a simple onboarding experience. The company shares its implementation to promote best practices in the industry and plans to discuss further enhancements for larger customers in future communications.

Vantage has announced the introduction of new cost recommendations aimed at AWS customers, specifically suggesting the use of Cloudflare to reduce significant egress costs associated with Amazon CloudFront and Amazon S3. The feature automatically monitors the last 30 days of egress usage, providing recommendations for potential savings by switching to Cloudflare, as illustrated by Dispo's experience of potentially saving over 90% on egress fees. This development is part of Vantage's broader strategy to offer cost-saving recommendations across various cloud infrastructure and service providers, with current efforts focused on CloudFront and S3 due to their significant cost impact on AWS bills. These recommendations are automatically available to existing Vantage customers through their console, and no personal or usage data is shared with Cloudflare.

Vantage has introduced the "Cloud Cost Handbook," an open-source and community-supported guide aimed at educating developers, engineering leaders, and finance teams on managing cloud costs effectively. Accessible to anyone online, the handbook covers a variety of topics, including general concepts like committed-use discounts and rightsizing, as well as specific cost considerations for AWS services. It is hosted at handbook.vantage.sh and the content is available on GitHub, allowing the community to contribute and update information collaboratively. The handbook addresses the widespread lack of awareness surrounding cloud cost management practices, which are often known only to a few experts or found in complex documentation. Vantage encourages contributions from the community to expand the handbook to include additional cloud service providers beyond AWS, such as Azure and GCP, and supports the initiative through a Creative Commons license allowing for non-commercial use and adaptation.