AWS Builder Center
Building BB-CloudSight: An AWS Infrastructure Discovery, Security & FinOps Platform

Building BB-CloudSight: An AWS Infrastructure Discovery, Security & FinOps Platform

BB-CloudSight helps AWS users gain complete visibility into their cloud environments by combining resource discovery, security analysis, and FinOps insights into a single platform. It supports multi-region AWS scanning, automated security assessments, infrastructure inventory management, and AI-powered cloud recommendations for smarter operational decisions.

Cloud DevOps Engineer @ The Cloud Advisory

BB-CloudSight

AWS Infrastructure Discovery, Security & FinOps Intelligence Platform

BB-CloudSight is an AWS cloud visibility platform that helps engineers discover resources, identify security risks, analyze infrastructure inventory, and gain FinOps insights from a single interface.

🚀 Key Features

  • Multi-Region AWS Resource Discovery
  • EC2, EBS, S3 and Security Group Inventory
  • Automated Security Scanning
  • Open Security Group Detection
  • Unencrypted EBS Volume Detection
  • FinOps Score Calculation
  • Cost Optimization Recommendations
  • AI-Powered Infrastructure Insights
  • REST API Driven Architecture

🛠️ Tech Stack

  • Python
  • FastAPI
  • Boto3
  • SQLite
  • React
  • Electron
  • AWS APIs

🏗️ Architecture

1
2
3
4
5
6
7
8
9
10
11
React Frontend
│
▼
FastAPI Backend
│
▼
AWS Services
(EC2, S3, EBS, IAM, Cost Explorer)
│
▼
SQLite Database

🔍 Real-World Testing Results

Successfully tested against a live AWS account:
  • Connected to AWS using Profile Authentication
  • Scanned Multiple AWS Regions
  • Discovered 16 AWS Resources
  • Identified 8 Security Findings
  • Detected Open Security Groups
  • Detected Unencrypted EBS Volumes
  • Generated Infrastructure Inventory Reports
  • Produced FinOps and Security Insights

📈 Roadmap

  • AWS Organizations Support
  • Multi-Account Visibility
  • Terraform State Analysis
  • CloudFormation Drift Detection
  • Kubernetes Discovery
  • Cost Forecasting
  • Cost Anomaly Detection
  • AI-Powered Remediation Suggestions


My Outputs (for security reasons changed Account ID to 123456789101)

and so on..

after deletion of the resources I run the command to get the services running on AWS account:

Now we can see that no Services are running.

GitHub Repository

Author

Bhupendra Bhati
Cloud & DevOps Engineer
Any opinions in this article are those of the individual author and may not reflect the opinions of AWS.
Enjoyed reading this content? Let the author know!

Your likes, comments, shares, and saves help creators reach more builders.

Loading recommendations

Loading article