AWS Insights in Spotto: Costs and Recommendations

Once your AWS accounts are connected, their costs, recommendations and evidence appear in the same Spotto pages as Azure. This page covers what's different about AWS data, and how to read partial or unavailable values.

Review Costs and Savings

After an account scan, Spotto shows its published resources, recommendations and cost evidence. Choose the AWS accounts you want to review from the account selector. You can also select Azure subscriptions in the same company.

Savings marked AWS estimate use AWS's published estimates. A partial total includes the recommendations with qualified amounts; Based on X of Y explains its coverage. Missing amounts stay unavailable, and a measured zero remains zero. When an account could not be loaded, review the separate account warning as well as the coverage hint.

Resource Cost & Usage shows the available billed and amortized cost lines. One missing cost basis is not replaced with the other. Cost Analysis identifies the published cost basis and whether usage anomaly assessment completed. AWS costs exclude tax, like Azure. Your AWS invoice adds any tax AWS charges. Recorded chart costs can include periodic charges that are excluded from usage assessment. A visible spike therefore does not always indicate unusual resource usage. An unavailable projection or detector assessment does not mean zero spend or normal spending.

Track Recommendation Work

On Recommendations, use the Active, Dismissed and Snoozed views to review current recommendation state. Depending on your permissions, you can add comments, dismiss a recommendation, snooze it until a date or restore it. An expired snooze returns to Active.

Implement creates a work item in the Kanban board's In Progress lane. It does not change the AWS resource. Spotto's AWS role remains read-only; review and perform cloud changes through your normal AWS change process.

The board can also contain recommendations you prioritize manually. If ranked priorities are unavailable for the selected accounts, use View Recommendations to choose work to prioritize.

Keep Resource Notes

Use the resource's Notes tab to record known issues, troubleshooting, performance, maintenance, migration, dependencies and security or compliance details. Notes are shared with authorized users of the same Spotto company and account. Editing requires permission; API keys cannot write notes.

S3 bucket identifiers do not include an account ID. Spotto confirms that the bucket appears in the account's current resource publication before reading or saving its notes.

Read Coverage Before Comparing Scores

Security, Health, Governance and other evidence pages show coverage notices with expandable details. A missing observation does not mean that a resource is healthy or compliant.

The AWS security score uses Security Hub CSPM controls. It is a different measure from Azure Defender's score. A partial AWS score identifies the contributing regions; missing or stale evidence stays unavailable. Trusted Advisor checks, GuardDuty threats and Inspector vulnerabilities remain distinct evidence sources. See AWS security access.

Commitments may belong to the organization rather than a member account. Select the organization to review its commitments. Organization coverage cards labelled Configured Member describe the configured members with billing evidence; consolidated payer purchase and utilization evidence may cover additional accounts. Unavailable or stale purchase evidence does not become a zero purchase total.

Account commitment coverage shows qualified compute and Database Savings Plans separately. Native Savings Plans coverage uses On-Demand equivalent usage cost; Reserved Instance coverage uses instance hours. These percentages are not averaged and do not describe billed or amortized commitment charges. Consumed benefits do not establish which commitments the account owns or when payer-owned commitments expire. A missing family can withhold a combined value while other family figures remain available.

Governance also provides native Security Hub standards and a graph of recorded access paths when those sources are available. Read unassessed controls, source gaps and display omissions before interpreting the counts. Recorded assignments do not prove effective access or compliance certification.

Troubleshooting

What you see	What to check
Unavailable instead of a monetary amount	Check billing collection, currency and the selected account's coverage. Missing evidence is not a zero. See AWS billing exports.
A partial savings or security score	Focus or hover over the savings coverage hint for its count and basis. Expand security coverage details to see which regions contribute.
An empty member Commitments page	Select the AWS organization if commitments are owned by the payer.
Notes cannot be loaded for an S3 bucket	Confirm that the current account scan includes the exact bucket and that you can access the company and account.
Some counts are shown as a dash	The scan has not published complete evidence for that count. Review the account's scan status and coverage.

For connection and collection failures, see AWS setup troubleshooting.