Unneeded security-service cost

What's the problem

CloudTrail recording the same management events twice ($2 per 100k events for the extra copy), AWS Config recording IAM in several Regions, VPC Flow Logs in CloudWatch Logs without retention, Shield Advanced ($3,000/month) protecting ≤5 resources, WAF web ACLs attached to nothing ($5/month)

How 6WAF detects it

• The threshold and data source are stated in the description above (CloudWatch metrics / AWS API describe calls) — this is the checker logic that runs in the scan, not separate marketing copy.
• Scanning uses a read-only IAM Role you deploy yourself (CloudFormation) — 6WAF stores no credentials, and you revoke access any time by deleting the stack.
• Unit prices used for estimates have a published source and an as-of date (us-east-1 baseline) — figures are a conservative lower bound, not inflated.