Cloud governance

Your AWS estate, next to your fleet

The AWS console is fine until you have three accounts, two regions, and one question: what are we actually running and what does it cost? LynxTrac onboards AWS accounts by access key or cross-account IAM role and answers that question continuously.

It lives in the same console as your servers and endpoints, which sounds minor until the EC2 instance throwing alerts is also the one drifting from its baseline, and you can see both without switching tools.

Inventory that includes the forgotten regions

EC2, RDS, S3, VPCs, Lambda, EKS, ECR, backup vaults, and Secrets Manager discovered across regions automatically, including the resources someone launched in us-west-1 in 2024 and forgot.

Cost, daily, by the dimensions that matter

Per-account, per-region, per-service breakdowns with month-over-month trends, budget alerts, and recommendations for idle and oversized resources.

Compliance and drift on a schedule

Daily scans against CIS, PCI-DSS, HIPAA, and SOC 2 with severity-graded findings and exception management, plus drift detection against versioned baselines.

Cloud Shell and IaC export

An in-browser CLI with managed keypairs for quick operations, and Terraform or CloudFormation export from live resources when it is time to codify them.

Setting it up

Onboard with an access key or, preferably, a cross-account IAM role. Credentials are encrypted at rest with AES-256-GCM and per-account key derivation.

One cloud account is included on every plan including Free; cost analytics, compliance, and drift live on Business and up.

Related: Cloud governance

Asked about this integration

What access does LynxTrac need to my AWS account?
Read access covers inventory, cost, and compliance scanning. Scheduled start/stop operations and active drift remediation need the corresponding write permissions, scoped to what you enable. Cross-account IAM roles keep the grant auditable and revocable on your side.
Does this replace AWS Config or Cost Explorer?
It overlaps with both, then puts the result next to your endpoints and your other clouds. Single-account, single-cloud shops may not need it; the value shows up when AWS is one of several things you are responsible for.

See it connected to your own account

The free tier covers 2 servers forever, which is enough to wire this up and judge it on your infrastructure rather than ours.