Skip to content
CloudPouch Docs

Concepts

CloudPouch is a desktop application that reads your AWS billing and resource data through your local AWS profiles and analyzes it on your machine. The pages in this section explain the ideas behind that model: what a Cost Insight is, how CloudPouch presents billing data, why EBS storage is one of the most common sources of silent AWS waste, and why the desktop architecture matters for security.

Core concepts

Section titled “Core concepts”

Start here if you want to understand how CloudPouch turns raw AWS billing data into actionable findings:

  • What is a Cost Insight? — the focused checks CloudPouch runs to find savings, from unattached EBS volumes to EKS Extended Support charges.
  • Billing and reports — how CloudPouch presents AWS cost data: amortized Savings Plans and Reserved Instances, UsageType drill-downs, linked-account views, and month-to-month Compare reports.
  • EBS volume waste — why EBS bills for every provisioned GB whether you use it or not, and how that has produced six-figure monthly savings in real accounts.

Security & privacy

Section titled “Security & privacy”

CloudPouch’s architecture is the answer to most security questionnaires: your cost data never leaves the path between AWS and your computer.

  • Desktop app vs SaaS — the data-path difference between CloudPouch and hosted cost tools, and what CloudPouch servers do and do not see.
  • AWS read-only access — CloudPouch only reads; it never creates, modifies, or deletes AWS resources.
  • AWS credentials and SSO profiles — how CloudPouch reuses the same ~/.aws configuration as the AWS CLI, including IAM Identity Center (SSO) and role-chaining profiles.
Section titled “Related pages”