"author:kanchingyg" matching MCP servers:

Enables read-only AWS FinOps scans for hidden costs such as NAT Gateway endpoint traffic, infinite log retention, gp2/orphaned EBS volumes, idle Elastic IPs, and stale snapshots, with USD/month estimates and Terraform or CloudFormation remediation patch generation.

Enables users to inspect Cloudflare Workers crash captures, replay failing requests offline with deterministic mocked bindings, and export Vitest regression tests.

Enables capturing real AWS SDK calls through Client-Side Monitoring (CSM UDP) and turning them into least-privilege IAM policies, emitted as JSON, Terraform, or AWS CDK over a JSON-RPC stdio interface. Policy writes are path-contained and dry-run by default, requiring an explicit opt-in flag.