Daily AWS Cost Tracker and Forecast
Every morning, the agent hits Cost Explorer for yesterday's spend by service, compares to the budget, forecasts end-of-month, and drops it on WhatsApp before the coffee is cold.
Conversation example
Querying Cost Explorer for yesterday's unblended cost, grouped by service...
AWS Cost — April 11, 2026 Yesterday: $184.20 (↑ $18 vs 7-day avg) MTD: $1,942.80 Budget: $6,000/mo Forecast (EOM): $5,820 — 97% of budget Top services yesterday: 1. EC2 — $92.10 (50%) 2. RDS — $38.40 (21%) 3. S3 — $21.80 (12%) 4. Lambda — $11.20 (6%) 5. Data transfer — $9.60 (5%) 6. Other — $11.10 (6%) Anomaly: EC2 spend +$14/day this week — correlates with the new m6i.2xlarge you launched Apr 7. Worth confirming it's intentional.
More AWS use cases
EC2 Instance State Change Alerts
Any EC2 instance that starts, stops, or terminates unexpectedly fires an EventBridge event. The agent reads it, adds context (who, why, tags), and posts to your #infra WhatsApp group.
Lambda Function Error Notifications
CloudWatch Alarms on Lambda error metrics route through the agent. It groups related errors, pulls the latest stack trace from CloudWatch Logs, and pings on-call with the suspected cause.
S3 Bucket Public-Access Audit
The agent checks every S3 bucket policy and ACL daily. If a bucket becomes public — or if an existing policy changes — it fires an immediate WhatsApp alert with the diff.
CloudWatch Alarm Routing to On-Call
CloudWatch alarms hit an SNS topic subscribed to LunoGen. The agent checks the current on-call rotation, adds runbook links, and DMs the right engineer on WhatsApp — not just the #alerts channel.
IAM Policy and Suspicious API Call Alerts
CloudTrail streams IAM changes and sensitive API calls (root login, access key creation, policy attach) to the agent, which flags anything suspicious and pings the security channel on WhatsApp.
Deploy this in minutes
Create a LunoGen agent, connect AWS, and start running this workflow from WhatsApp today.