oldwinter/aws-cost-explorer
devops-skills/aws-cost-explorer/SKILL.md
This skill should be used when users need to query AWS cost and usage details for a specific date. It supports querying costs at service level (e.g., EC2, S3, RDS) and drilling down to usage type level (e.g., instance types, storage classes, data transfer). Triggers on requests mentioning AWS costs, billing, spending, cost breakdown, or fee analysis.
$ install --global
skillsauthnpx skillsauth add oldwinter/skills aws-cost-explorerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 9, 2026, 7:12 AM167.8s2 files scanned
SKILL.md
- name:
- aws-cost-explorer
- description:
- This skill should be used when users need to query AWS cost and usage details for a specific date. It supports querying costs at service level (e.g., EC2, S3, RDS) and drilling down to usage type level (e.g., instance types, storage classes, data transfer). Triggers on requests mentioning AWS costs, billing, spending, cost breakdown, or fee analysis.
AWS Cost Explorer
Query AWS costs and usage details with flexible granularity - from service-level overview to detailed usage type breakdown.
Capabilities
- Query daily AWS costs by service (e.g., EC2, S3, OpenSearch, DocumentDB)
- Drill down to usage type details for specific services (e.g., instance types, storage, data transfer)
- Filter results by minimum cost threshold
- Support both relative dates (days ago) and absolute dates (YYYY-MM-DD)
- Output in human-readable table or JSON format
Usage
Quick Commands
To query costs, use the bundled script at scripts/cost_query.py:
# Query costs from 2 days ago (default) by service
python3 <skill-path>/scripts/cost_query.py
# Query yesterday's costs, show items > $5
python3 <skill-path>/scripts/cost_query.py --days-ago 1 --min-cost 5
# Query specific date
python3 <skill-path>/scripts/cost_query.py --date 2026-01-15
# Query specific service's usage breakdown
python3 <skill-path>/scripts/cost_query.py --service "Amazon OpenSearch Service" --min-cost 1
# Query all services with usage type details
python3 <skill-path>/scripts/cost_query.py --detailed --min-cost 5
# Output as JSON
python3 <skill-path>/scripts/cost_query.py --json --min-cost 5
Script Options
| Option | Short | Description |
|--------|-------|-------------|
| --days-ago | -d | Query N days ago (default: 2, i.e., day before yesterday) |
| --date | | Query specific date (YYYY-MM-DD format) |
| --min-cost | -m | Minimum cost threshold to display (default: 0) |
| --service | -s | Query usage type breakdown for a specific service |
| --detailed | | Show all services with usage type breakdown |
| --json | -j | Output in JSON format |
Common Service Names
When using --service, use the exact AWS service names:
| Common Name | AWS Service Name |
|-------------|------------------|
| OpenSearch | Amazon OpenSearch Service |
| DocumentDB/MongoDB | Amazon DocumentDB (with MongoDB compatibility) |
| EC2 Compute | Amazon Elastic Compute Cloud - Compute |
| EC2 Other (EBS, NAT) | EC2 - Other |
| EFS | Amazon Elastic File System |
| S3 | Amazon Simple Storage Service |
| RDS | Amazon Relational Database Service |
| EKS | Amazon Elastic Container Service for Kubernetes |
| VPC | Amazon Virtual Private Cloud |
| Bedrock | Amazon Bedrock |
| Lambda | AWS Lambda |
| CloudWatch | AmazonCloudWatch |
Understanding Usage Types
Common usage type patterns:
| Pattern | Meaning |
|---------|---------|
| BoxUsage:* | EC2 instance hours (e.g., BoxUsage:m7i.large) |
| ESInstance:* | OpenSearch instance hours |
| EBS:VolumeUsage.* | EBS storage (e.g., EBS:VolumeUsage.gp3) |
| TimedStorage-ByteHrs | S3/EFS storage capacity |
| DataTransfer-* | Data transfer costs |
| NatGateway-* | NAT Gateway costs |
| VpcEndpoint-* | VPC Endpoint costs |
| *-input-tokens / *-output-tokens | Bedrock token usage |
| Elastic*Usage | DocumentDB Elastic costs |
Prerequisites
- AWS CLI configured with appropriate credentials
- IAM permissions for
ce:GetCostAndUsage
Example Workflow
-
First, get service-level overview:
python3 <skill-path>/scripts/cost_query.py --min-cost 5 -
Identify high-cost services, then drill down:
python3 <skill-path>/scripts/cost_query.py --service "Amazon OpenSearch Service" --min-cost 1 -
For comprehensive analysis, use detailed mode:
python3 <skill-path>/scripts/cost_query.py --detailed --min-cost 5
Related Skills
oldwinter/cloudflare-deploy
devops
VerifiedTrustedCommunity
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.
3SKILL.mdUpdated Jun 9, 2026
oldwinter/aws-support-case
tools
VerifiedTrustedCommunity
This skill should be used when users need to manage AWS Support cases via CLI. It handles listing cases (recent 2 weeks, unresolved), viewing case details with bilingual display (English-Chinese line by line), creating new cases with auto-detected service/category, replying to cases, and attachment handling. Triggers on requests mentioning "AWS support", "support case", "工单", "support ticket", or AWS technical support inquiries.
3SKILL.mdUpdated Jun 9, 2026
oldwinter/aws-cli
tools
VerifiedTrustedCommunity
This skill should be used when users need to interact with AWS services via CLI. It covers all AWS services including EC2, ECS, EKS, Lambda, S3, RDS, DynamoDB, VPC, Route53, CloudFront, Bedrock, Support, Billing, and more. Supports querying, creating, modifying, deleting resources, monitoring, debugging, and cost analysis. Triggers on requests mentioning AWS, cloud resources, or specific AWS service names.
3SKILL.mdUpdated Jun 9, 2026
oldwinter/api-billing-service-onboarding
development
VerifiedTrustedCommunity
This skill should be used when the user requests to add a new third-party API service to the AWS billing/quota monitoring system. It handles the complete onboarding process including adapter creation, Lambda deployment, CloudWatch alarms, Dashboard updates, and verification. Triggers on requests mentioning "add service monitoring", "monitor API balance", "setup quota alerts", "add to billing dashboard", or similar service integration requests.
3SKILL.mdUpdated Jun 9, 2026