LICENSE
MANIFEST.in
README.md
pyproject.toml
setup.py
dashboard/demo_ai_audit.json
dashboard/demo_full_audit.json
dashboard/index.html
dashboard/index2.html
dashboard/kosty-ai-audit-dashboard.png
dashboard/kosty-dashboard-header.png
dashboard/kosty_dashboard.png
dashboard/test_dashboard_costs.json
docs/ARCHITECTURE_V3.md
docs/CLI_REFERENCE.md
docs/CONFIGURATION.md
docs/DOCUMENTATION.md
docs/EXAMPLES.md
docs/MULTI_PROFILE_GUIDE.md
docs/RELEASE_NOTES.md
docs/SERVICES.md
kosty/__init__.py
kosty.egg-info/PKG-INFO
kosty.egg-info/SOURCES.txt
kosty.egg-info/dependency_links.txt
kosty.egg-info/entry_points.txt
kosty.egg-info/not-zip-safe
kosty.egg-info/requires.txt
kosty.egg-info/top_level.txt
kosty/cli/__init__.py
kosty/cli/__main__.py
kosty/cli/acm_commands.py
kosty/cli/ai_commands.py
kosty/cli/apigateway_commands.py
kosty/cli/backup_commands.py
kosty/cli/cloudtrail_commands.py
kosty/cli/cloudwatch_commands.py
kosty/cli/config_commands.py
kosty/cli/dynamodb_commands.py
kosty/cli/ebs_commands.py
kosty/cli/ec2_commands.py
kosty/cli/ecs_commands.py
kosty/cli/eip_commands.py
kosty/cli/elasticache_commands.py
kosty/cli/guardduty_commands.py
kosty/cli/iam_commands.py
kosty/cli/kms_commands.py
kosty/cli/lambda_commands.py
kosty/cli/lb_commands.py
kosty/cli/nat_commands.py
kosty/cli/public_exposure_commands.py
kosty/cli/rds_commands.py
kosty/cli/route53_commands.py
kosty/cli/s3_commands.py
kosty/cli/secretsmanager_commands.py
kosty/cli/sg_commands.py
kosty/cli/snapshots_commands.py
kosty/cli/sns_commands.py
kosty/cli/sqs_commands.py
kosty/cli/ssm_commands.py
kosty/cli/utils.py
kosty/cli/vpc_commands.py
kosty/cli/waf_commands.py
kosty/core/__init__.py
kosty/core/config.py
kosty/core/engine.py
kosty/core/engine_scanner.py
kosty/core/exceptions.py
kosty/core/loader.py
kosty/core/models.py
kosty/core/multi_profile_runner.py
kosty/core/registry.py
kosty/core/reporter.py
kosty/core/scan_progress.py
kosty/core/storage.py
kosty/core/tag_utils.py
kosty/providers/__init__.py
kosty/providers/aws/__init__.py
kosty/providers/aws/session_utils.py
kosty/providers/aws/services/__init__.py
kosty/providers/aws/services/_pricing.py
kosty/providers/aws/services/plugins.sha256
kosty/providers/aws/services/acm/__init__.py
kosty/providers/aws/services/acm/check_expiring_certificates.py
kosty/providers/aws/services/apigateway/__init__.py
kosty/providers/aws/services/apigateway/check_cloudfront_bypass.py
kosty/providers/aws/services/apigateway/check_custom_domain_no_tls12.py
kosty/providers/aws/services/apigateway/check_http_api_no_jwt.py
kosty/providers/aws/services/apigateway/check_missing_request_validation.py
kosty/providers/aws/services/apigateway/check_no_authorization.py
kosty/providers/aws/services/apigateway/check_no_logging.py
kosty/providers/aws/services/apigateway/check_no_throttling.py
kosty/providers/aws/services/apigateway/check_no_waf.py
kosty/providers/aws/services/apigateway/check_private_api_no_policy.py
kosty/providers/aws/services/apigateway/check_unused_apis.py
kosty/providers/aws/services/backup/__init__.py
kosty/providers/aws/services/backup/check_cross_region_backup_dev_test.py
kosty/providers/aws/services/backup/check_empty_backup_vaults.py
kosty/providers/aws/services/bedrock/__init__.py
kosty/providers/aws/services/bedrock/check_batch_eligible.py
kosty/providers/aws/services/bedrock/check_cross_account_model_access.py
kosty/providers/aws/services/bedrock/check_custom_model_no_kms.py
kosty/providers/aws/services/bedrock/check_no_budget_limits.py
kosty/providers/aws/services/bedrock/check_no_guardrails.py
kosty/providers/aws/services/bedrock/check_no_inference_profiles.py
kosty/providers/aws/services/bedrock/check_no_logging.py
kosty/providers/aws/services/bedrock/check_no_prompt_caching.py
kosty/providers/aws/services/bedrock/check_no_vpc_endpoint.py
kosty/providers/aws/services/bedrock/check_premium_model_sizing.py
kosty/providers/aws/services/bedrock/check_shadow_ai.py
kosty/providers/aws/services/bedrock/check_tpm_quota.py
kosty/providers/aws/services/cloudtrail/__init__.py
kosty/providers/aws/services/cloudtrail/check_no_encryption.py
kosty/providers/aws/services/cloudtrail/check_no_log_validation.py
kosty/providers/aws/services/cloudtrail/check_not_enabled.py
kosty/providers/aws/services/cloudwatch/__init__.py
kosty/providers/aws/services/cloudwatch/check_log_groups_without_retention.py
kosty/providers/aws/services/cloudwatch/check_unused_alarms.py
kosty/providers/aws/services/cloudwatch/check_unused_custom_metrics.py
kosty/providers/aws/services/config/__init__.py
kosty/providers/aws/services/config/check_not_enabled.py
kosty/providers/aws/services/dynamodb/__init__.py
kosty/providers/aws/services/dynamodb/check_idle_tables.py
kosty/providers/aws/services/ebs/__init__.py
kosty/providers/aws/services/ebs/check_gp2_volumes.py
kosty/providers/aws/services/ebs/check_low_io_volumes.py
kosty/providers/aws/services/ebs/check_no_recent_snapshot.py
kosty/providers/aws/services/ebs/check_orphan_volumes.py
kosty/providers/aws/services/ebs/check_public_snapshots.py
kosty/providers/aws/services/ebs/check_unencrypted_in_use.py
kosty/providers/aws/services/ebs/check_unencrypted_orphan.py
kosty/providers/aws/services/ec2/__init__.py
kosty/providers/aws/services/ec2/check_idle_instances.py
kosty/providers/aws/services/ec2/check_old_ami.py
kosty/providers/aws/services/ec2/check_open_ports.py
kosty/providers/aws/services/ec2/check_oversized_instances.py
kosty/providers/aws/services/ec2/check_previous_generation.py
kosty/providers/aws/services/ec2/check_public_non_web.py
kosty/providers/aws/services/ec2/check_security.py
kosty/providers/aws/services/ec2/check_stopped_instances.py
kosty/providers/aws/services/ecs/__init__.py
kosty/providers/aws/services/ecs/check_privileged_tasks.py
kosty/providers/aws/services/eip/__init__.py
kosty/providers/aws/services/eip/check_eips_advanced.py
kosty/providers/aws/services/eip/check_unattached_eips.py
kosty/providers/aws/services/elasticache/__init__.py
kosty/providers/aws/services/elasticache/check_no_encryption_at_rest.py
kosty/providers/aws/services/elasticache/check_no_encryption_in_transit.py
kosty/providers/aws/services/guardduty/__init__.py
kosty/providers/aws/services/guardduty/check_not_enabled.py
kosty/providers/aws/services/iam/__init__.py
kosty/providers/aws/services/iam/check_access_keys.py
kosty/providers/aws/services/iam/check_admin_no_mfa.py
kosty/providers/aws/services/iam/check_all_users_mfa.py
kosty/providers/aws/services/iam/check_cross_account_no_external_id.py
kosty/providers/aws/services/iam/check_escalation_policies.py
kosty/providers/aws/services/iam/check_inactive_users.py
kosty/providers/aws/services/iam/check_inline_policies.py
kosty/providers/aws/services/iam/check_misc.py
kosty/providers/aws/services/iam/check_password_policy.py
kosty/providers/aws/services/iam/check_privilege_escalation.py
kosty/providers/aws/services/iam/check_root_access_keys.py
kosty/providers/aws/services/iam/check_root_mfa.py
kosty/providers/aws/services/iam/check_unused_roles.py
kosty/providers/aws/services/iam/check_wildcard_policies.py
kosty/providers/aws/services/kms/__init__.py
kosty/providers/aws/services/kms/check_no_key_rotation.py
kosty/providers/aws/services/lambda_func/__init__.py
kosty/providers/aws/services/lambda_func/check_functions.py
kosty/providers/aws/services/lambda_func/check_lambda_advanced.py
kosty/providers/aws/services/lb/__init__.py
kosty/providers/aws/services/lb/check_lb_advanced.py
kosty/providers/aws/services/lb/check_load_balancers.py
kosty/providers/aws/services/nat/__init__.py
kosty/providers/aws/services/nat/check_redundant_nat_gateways.py
kosty/providers/aws/services/nat/check_unused_nat_gateways.py
kosty/providers/aws/services/public_exposure/__init__.py
kosty/providers/aws/services/public_exposure/check_public_exposure.py
kosty/providers/aws/services/public_exposure/service.py
kosty/providers/aws/services/rds/__init__.py
kosty/providers/aws/services/rds/check_default_username.py
kosty/providers/aws/services/rds/check_disabled_backups.py
kosty/providers/aws/services/rds/check_gp2_storage.py
kosty/providers/aws/services/rds/check_idle_instances.py
kosty/providers/aws/services/rds/check_long_backup_retention.py
kosty/providers/aws/services/rds/check_multi_az_non_prod.py
kosty/providers/aws/services/rds/check_no_auto_minor_upgrade.py
kosty/providers/aws/services/rds/check_no_event_subscription.py
kosty/providers/aws/services/rds/check_no_performance_insights.py
kosty/providers/aws/services/rds/check_no_ssl_enforcement.py
kosty/providers/aws/services/rds/check_outdated_engine.py
kosty/providers/aws/services/rds/check_oversized_instances.py
kosty/providers/aws/services/rds/check_publicly_accessible.py
kosty/providers/aws/services/rds/check_unencrypted_storage.py
kosty/providers/aws/services/rds/check_unused_read_replicas.py
kosty/providers/aws/services/rds/check_wide_cidr_sg.py
kosty/providers/aws/services/route53/__init__.py
kosty/providers/aws/services/route53/check_unused_hosted_zones.py
kosty/providers/aws/services/s3/__init__.py
kosty/providers/aws/services/s3/check_cost.py
kosty/providers/aws/services/s3/check_data_protection.py
kosty/providers/aws/services/s3/check_no_encryption.py
kosty/providers/aws/services/s3/check_no_logging.py
kosty/providers/aws/services/s3/check_no_versioning.py
kosty/providers/aws/services/s3/check_public_read.py
kosty/providers/aws/services/s3/check_public_write.py
kosty/providers/aws/services/s3/check_wildcard_policy.py
kosty/providers/aws/services/sagemaker/__init__.py
kosty/providers/aws/services/sagemaker/check_idle_endpoints.py
kosty/providers/aws/services/sagemaker/check_no_checkpointing.py
kosty/providers/aws/services/sagemaker/check_no_inference_components.py
kosty/providers/aws/services/sagemaker/check_no_spot_training.py
kosty/providers/aws/services/sagemaker/check_no_vpc_endpoint.py
kosty/providers/aws/services/sagemaker/check_notebook_direct_internet.py
kosty/providers/aws/services/sagemaker/check_notebook_root_access.py
kosty/providers/aws/services/sagemaker/check_zombie_notebooks.py
kosty/providers/aws/services/secretsmanager/__init__.py
kosty/providers/aws/services/secretsmanager/check_no_rotation.py
kosty/providers/aws/services/secretsmanager/check_unused_secrets.py
kosty/providers/aws/services/sg/__init__.py
kosty/providers/aws/services/sg/check_security_groups.py
kosty/providers/aws/services/sg/check_sg_advanced.py
kosty/providers/aws/services/snapshots_svc/__init__.py
kosty/providers/aws/services/snapshots_svc/check_old_snapshots.py
kosty/providers/aws/services/sns/__init__.py
kosty/providers/aws/services/sns/check_no_encryption.py
kosty/providers/aws/services/sqs/__init__.py
kosty/providers/aws/services/sqs/check_no_encryption.py
kosty/providers/aws/services/ssm/__init__.py
kosty/providers/aws/services/ssm/check_non_compliant_patches.py
kosty/providers/aws/services/vpc/__init__.py
kosty/providers/aws/services/vpc/check_default_sg_open.py
kosty/providers/aws/services/vpc/check_no_flow_logs.py
kosty/providers/aws/services/waf/__init__.py
kosty/providers/aws/services/waf/check_default_count_action.py
kosty/providers/aws/services/waf/check_missing_managed_rules.py
kosty/providers/aws/services/waf/check_no_bot_control.py
kosty/providers/aws/services/waf/check_no_logging.py
kosty/providers/aws/services/waf/check_no_rate_based_rule.py
kosty/providers/aws/services/waf/check_unassociated_acls.py
tests/__init__.py
tests/test_config_honoring.py