AWS Cost Export

Export comprehensive AWS cost data for analysis and optimization.

Installation

pip install awscostexport

Quick Start

# Export default 12 months of cost data
awscostexport

# Export last 3 months
awscostexport --months 3

# Use specific AWS profile
awscostexport --profile prod-account

# Get help
awscostexport --help

# Use temporary credentials
awscostexport --access-key-id AKIA... --secret-access-key xxx --session-token xxx

# Filter by accounts
awscostexport --include-accounts 123456789012,234567890123
awscostexport --exclude-accounts 999999999999

# Use config file
awscostexport --config config.yaml

That's it! Your data will be exported as a zip file.

What You Get

The script exports comprehensive AWS cost data:

• Service breakdown - Top 10 services (marketplace excluded)
• EC2 analysis - Purchase options, instance types, Savings Plans vs RIs
• Database details - RDS engines, ElastiCache, DynamoDB configurations
• Reservation analysis - Complete RI/SP coverage for all eligible services
• Storage breakdown - EBS volume types (GP2, GP3, IO1)
• Network costs - Data transfer, NAT gateways
• Marketplace tracking - Separated from main costs
• Optimization metrics - Coverage %, utilization, on-demand opportunities

Output: Single zip file with 10+ CSV files ready for analysis.

Prerequisites

• Python 3.7 or later
• AWS credentials with Cost Explorer read access

AWS Credentials

The tool uses the standard AWS credential chain:

1. Environment variables

   export AWS_ACCESS_KEY_ID="your-access-key"
   export AWS_SECRET_ACCESS_KEY="your-secret-key"
   export AWS_SESSION_TOKEN="optional-session-token"
   

2. AWS credentials file (~/.aws/credentials)

   [default]
   aws_access_key_id = your-access-key
   aws_secret_access_key = your-secret-key
   
   [production]
   aws_access_key_id = prod-access-key
   aws_secret_access_key = prod-secret-key
   

3. AWS SSO

   aws sso login --profile production
   awscostexport --profile production
   

4. IAM Instance Profile (when running on EC2)

Required IAM Permissions

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ce:Get*",
        "ce:Describe*",
        "cur:Describe*"
      ],
      "Resource": "*"
    }
  ]
}

Configuration File

Create a config.yaml file to store credentials and filters:

# AWS Credentials (optional)
credentials:
  access_key_id: AKIAXXXXXXXXXXXXXXXX
  secret_access_key: YYYYYYYYYYYYYYYYYYYY
  session_token: ZZZZZZZZZZZZZZZZZZZZ  # optional

# Account Filters (optional)
filters:
  include_accounts:
    - "123456789012"
    - "234567890123"
  exclude_accounts:
    - "345678901234"

## Output

The script creates a **zip file** containing all your cost data:

| File | Description |
|------|-------------|
| 01_service_breakdown.csv | Top 10 services by cost (excludes marketplace) |
| 02_ec2_purchase_options.csv | EC2 on-demand vs reserved vs Savings Plans |
| 02a_ec2_instance_types.csv | EC2 instance types (if EC2 in top 10) |
| 03_rds_breakdown.csv | Database configurations |
| 03a_rds_engines.csv | Database engines |
| 04_savings_status.csv | Overall Savings Plans & RI coverage metrics |
| 05_container_services.csv | ECS/EKS/Fargate data (if in top 10) |
| 06_data_transfer_nat.csv | Network costs |
| 07_ebs_volumes.csv | Storage volume types |
| 08_marketplace_spend.csv | AWS Marketplace costs (separated) |
| 09_reservation_analysis.csv | **Comprehensive RI/SP analysis for all services** |
| AWS_COST_EXPORT_SUMMARY.md | Summary report |

## Troubleshooting

**"Cannot access AWS Cost Explorer"**
- Check your IAM permissions include `ce:*` access
- Verify credentials: `aws sts get-caller-identity`
- Cost Explorer needs 24 hours after first activation

**"No data returned"**
- Verify you have AWS costs in the time period
- Default exports last 6 months of data

## Support

Email: david.schwartz@devfactory.com

## License

MIT License - See LICENSE file for details.