automateyournetwork/aws-cost-ops
workspace/skills/aws-cost-ops/SKILL.md
AWS Cost Explorer — spending analysis, service breakdowns, forecasts, cost anomalies. Use when analyzing AWS spending, investigating cost spikes, reviewing network cost drivers like NAT Gateway, or forecasting next month's bill.
$ install --global
skillsauthnpx skillsauth add automateyournetwork/netclaw aws-cost-opsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 3:29 AM4.5s1 file scanned
SKILL.md
- name:
- aws-cost-ops
- description:
- AWS Cost Explorer — spending analysis, service breakdowns, forecasts, cost anomalies. Use when analyzing AWS spending, investigating cost spikes, reviewing network cost drivers like NAT Gateway, or forecasting next month's bill.
- version:
- 1.0.0
- license:
- Apache-2.0
- tags:
- [aws, cost-explorer, billing, finops, cost-optimization]
AWS Cost Operations
MCP Server
- Command:
uvx awslabs.cost-explorer-mcp-server@latest(stdio transport) - Requires:
AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_REGION(orAWS_PROFILE) - Note: Cost Explorer API charges $0.01 per request — be mindful of query volume
Key Capabilities
- Cost breakdown: Spending by service, account, region, or tag
- Time series: Daily, monthly, or custom date range cost trends
- Forecasts: Predicted spend based on historical patterns
- Anomaly detection: Unusual spending spikes
- Filtering: Narrow by service (EC2, VPC, TGW, NAT GW, VPN, etc.)
Workflow: Network Cost Analysis
When a user asks "how much is our AWS network costing?":
- Total network spend: Cost breakdown for VPC, Transit Gateway, NAT Gateway, VPN, ELB, Direct Connect
- Trend: Monthly trend for network services over last 6 months
- Top services: Rank network services by spend (NAT GW data processing is often #1)
- Per-region: Break down network costs by region
- Forecast: Projected network spend for next month
- Report: Network cost dashboard with optimization recommendations
Workflow: Cost Anomaly Investigation
When investigating unexpected charges:
- Daily breakdown: Get daily costs for the spike period
- Service drill-down: Which service caused the spike?
- Region check: Was the spike in a specific region?
- Correlate: Cross-reference with CloudTrail for resource creation events
- Report: Root cause and recommended action
Workflow: Monthly Cost Review
For regular FinOps review:
- Month-over-month: Compare current vs previous month spending
- Service breakdown: Top 10 services by cost
- Network focus: VPC, TGW, NAT GW, VPN, ELB, Direct Connect costs
- Growth rate: Percentage change per service
- Forecast: Next month projection
- Report: Executive cost summary with trends
Common AWS Network Cost Drivers
| Service | Cost Component | Typical Driver | |---------|---------------|----------------| | NAT Gateway | Data processing | $0.045/GB — largest network cost for most | | NAT Gateway | Hourly charge | $0.045/hr per NAT GW | | Transit Gateway | Data processing | $0.02/GB per attachment | | Transit Gateway | Hourly charge | $0.05/hr per attachment | | VPN | Hourly charge | $0.05/hr per VPN connection | | VPN | Data transfer | $0.09/GB outbound | | ELB (ALB) | Hourly + LCU | $0.0225/hr + LCU charges | | ELB (NLB) | Hourly + NLCU | $0.0225/hr + NLCU charges | | Direct Connect | Port hours | $0.03-$0.30/hr depending on speed | | Data Transfer | Cross-AZ | $0.01/GB each direction | | Data Transfer | Cross-Region | $0.02/GB | | Data Transfer | Internet out | $0.09/GB (first 10TB) |
Cost Optimization Tips
| Finding | Recommendation | |---------|---------------| | High NAT GW data processing | Use VPC endpoints for S3/DynamoDB (free) | | Multiple NAT GWs per AZ | Consolidate if traffic allows | | Idle VPN connections | Delete unused VPN tunnels | | Cross-AZ traffic | Co-locate resources in same AZ where possible | | Oversized ELB | Right-size based on actual LCU/NLCU usage | | Unused EIPs | Release unattached Elastic IPs ($0.005/hr) |
Important Rules
- Cost Explorer API charges $0.01 per request — batch queries, avoid excessive polling
- Data lag — Cost data can be delayed up to 24 hours
- Unblended vs amortized — clarify which cost type the user wants
- Record in GAIT — log cost investigations for audit trail
Environment Variables
AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_REGION(orAWS_PROFILE)
Related Skills
automateyournetwork/zoom-meeting-context
tools
VerifiedTrustedCommunity
Zoom meeting intelligence — correlates a live or referenced Zoom meeting discussion against NetClaw's historical meeting record (via the official Zoom Meetings MCP) and today's actual network state. Use when someone in a Zoom meeting references a past discussion or incident ('didn't we have this issue before?'), or asks to search prior meetings for a topic. Does not itself recognize live in-meeting questions — that happens automatically inside zoom-rtms-mcp's own extractor (spec 118) before this skill is ever invoked.
644SKILL.mdUpdated Aug 27, 2026
automateyournetwork/percepxion-oob
tools
VerifiedTrustedCommunity
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and AI-assisted automation workflows.
644SKILL.mdUpdated Aug 13, 2026
automateyournetwork/n2n-federation
tools
VerifiedTrustedCommunity
Federate your NetClaw with other NetClaw operators over the BGP mesh — exchange capability inventories and ask your claw what a peer can do. (US1; remote invocation and chat land in later phases.)
638SKILL.mdUpdated Jul 11, 2026
automateyournetwork/token-tracker
tools
VerifiedTrustedCommunity
Track token consumption, enforce session budgets, and display cost for every NetClaw interaction.
638SKILL.mdUpdated Apr 3, 2026