Representative sample report. Names, figures and findings are illustrative.

Opsvane

GCP FinOps Audit: Detail Report

Prepared for Contoso
Project: Contoso Dev EU  |  Project ID: contoso-dev-394821  |  Findings: ~310  |  Regions: europe-west1, europe-west4  |  Date: 2026-06-02  |  Read only assessment
⬆ Back to Executive Summary
Total Cost (Last 30 days)
EUR 9,240
Flagged Cost
EUR 2,400
26% of total
Est. Savings
EUR 1,786
19.3% of total
Findings
~310

📊 Category Summary

Category Findings Cost Est. Savings
🔴 Immediate Waste (Delete / Stop) 17 EUR 185 EUR 185
🟠 Optimization Opportunities 58 EUR 1,195 EUR 537
🟡 Pricing Optimization 20 EUR 2,130 EUR 549 (low conf.)
🔵 Data & Storage Efficiency 67 EUR 2,199 EUR 306
🟣 Network & Architecture 11 EUR 0 EUR 0
⚫ Governance & Visibility ~91 EUR 0 EUR 0
⚪ Behavioral Inefficiencies 57 EUR 1,535 EUR 209 (post-dedup)
Category Total ~321 EUR 7,244 EUR 1,786
Unique Resource Total * EUR 2,400 EUR 1,786

* Resources may appear in multiple categories. Unique Resource Total counts each resource only once.

🔴 Immediate Waste (Delete / Stop)

Unattached Persistent Disks 8Effort: Low · Confidence: High · Risk: Low

Cost: EUR 95| Est. Savings: EUR 95
ProjectZoneDiskNameSizeGBDiskTypeCreatedResourceURLMonthlyCostEstSavings
contoso-dev-394821europe-west1-bdisk-analytics-dev-03-data200pd-ssd2025-08-14//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west1-b/disks/disk-analytics-dev-03-dataEUR 17EUR 17
contoso-dev-394821europe-west4-adisk-dataapp-dev-01-data500pd-standard2025-07-22//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west4-a/disks/disk-dataapp-dev-01-dataEUR 19EUR 19
contoso-dev-394821europe-west1-cdisk-webportal-dev-03-data100pd-ssd2025-09-30//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west1-c/disks/disk-webportal-dev-03-dataEUR 9EUR 9
contoso-dev-394821europe-west1-bdisk-payments-dev-02-boot50pd-balanced2025-11-03//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west1-b/disks/disk-payments-dev-02-bootEUR 4EUR 4
contoso-dev-394821europe-west4-bdisk-monitoring-dev-01-data150pd-balanced2025-10-15//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west4-b/disks/disk-monitoring-dev-01-dataEUR 14EUR 14
contoso-dev-394821europe-west1-bdisk-devtools-dev-02-boot50pd-standard2025-12-01//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west1-b/disks/disk-devtools-dev-02-bootEUR 2EUR 2
contoso-dev-394821europe-west4-adisk-reporting-dev-01-data250pd-ssd2025-06-18//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west4-a/disks/disk-reporting-dev-01-dataEUR 21EUR 21
contoso-dev-394821europe-west1-cdisk-legacy-dev-01-data100pd-balanced2025-05-10//compute.googleapis.com/projects/contoso-dev-394821/zones/europe-west1-c/disks/disk-legacy-dev-01-dataEUR 9EUR 9

Orphaned Static External IP Addresses 4Effort: Low · Confidence: High · Risk: Low

Cost: EUR 28| Est. Savings: EUR 28
ProjectRegionAddressNameIPAddressStatusCreatedResourceURLMonthlyCostEstSavings
contoso-dev-394821europe-west1ip-lb-payments-dev34.90.12.45RESERVED2025-09-15//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west1/addresses/ip-lb-payments-devEUR 7EUR 7
contoso-dev-394821europe-west1ip-vpn-dataapp-dev34.90.14.112RESERVED2025-07-28//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west1/addresses/ip-vpn-dataapp-devEUR 7EUR 7
contoso-dev-394821europe-west4ip-bastion-dev-old34.91.16.203RESERVED2025-11-04//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west4/addresses/ip-bastion-dev-oldEUR 7EUR 7
contoso-dev-394821europe-west4ip-api-legacy-dev34.91.20.85RESERVED2025-06-12//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west4/addresses/ip-api-legacy-devEUR 7EUR 7

Orphaned Load Balancer Forwarding Rules 3Effort: Low · Confidence: Medium · Risk: Low

Cost: EUR 18| Est. Savings: EUR 18
ProjectRegionForwardingRuleTargetResourceStatusResourceURLMonthlyCostEstSavings
contoso-dev-394821europe-west1fr-payments-v1-dev(backend deleted)ORPHANED//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west1/forwardingRules/fr-payments-v1-devEUR 6EUR 6
contoso-dev-394821europe-west1fr-analytics-api-dev(backend deleted)ORPHANED//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west1/forwardingRules/fr-analytics-api-devEUR 6EUR 6
contoso-dev-394821europe-west4fr-legacy-gateway-dev(backend deleted)ORPHANED//compute.googleapis.com/projects/contoso-dev-394821/regions/europe-west4/forwardingRules/fr-legacy-gateway-devEUR 6EUR 6

Cloud VPN Tunnels With No Traffic (30+ days) 2Effort: Low · Confidence: High · Risk: Low

Cost: EUR 44| Est. Savings: EUR 44
ProjectRegionTunnelNameGatewayNameTrafficLast30DaysCreatedMonthlyCostEstSavings
contoso-dev-394821europe-west1vpn-onprem-dev-01gateway-onprem-dev0 bytes2025-08-05EUR 22EUR 22
contoso-dev-394821europe-west4vpn-datacenter-dev-01gateway-dc-dev0 bytes2025-10-22EUR 22EUR 22

🟠 Optimization Opportunities

Cloud Recommender: Right size Compute Engine Instances 5Effort: High · Confidence: High · Risk: Review

Cost: EUR 515| Est. Savings: EUR 312
ProjectZoneInstanceNameCurrentMachineTypeRecommendedMachineTypeAvgCPUPctMonthlyCostEstSavings
contoso-dev-394821europe-west1-bvm-analytics-dev-01n2-standard-8n2-standard-44.2%EUR 112EUR 56
contoso-dev-394821europe-west1-bvm-payments-dev-01n2-standard-4n2-standard-26.1%EUR 56EUR 28
contoso-dev-394821europe-west4-avm-dataapp-dev-01n2-highmem-8n2-standard-48.3%EUR 145EUR 89
contoso-dev-394821europe-west4-avm-reporting-dev-02n2-standard-4e2-standard-25.7%EUR 56EUR 29
contoso-dev-394821europe-west1-cvm-webportal-dev-02n1-standard-8n2-standard-47.1%EUR 146EUR 110

Idle Compute Engine Instances (<5% CPU, 7+ days) 7Effort: Medium · Confidence: Medium · Risk: Review

Cost: EUR 225| Est. Savings: EUR 225
ProjectZoneInstanceNameMachineTypeAvgCPUPctAvgMemPctStatusMonthlyCostEstSavings
contoso-dev-394821europe-west1-bvm-devtools-dev-03n2-standard-41.2%3.4%RUNNINGEUR 56EUR 56
contoso-dev-394821europe-west4-bvm-monitoring-dev-02n1-standard-22.1%8.1%RUNNINGEUR 36EUR 36
contoso-dev-394821europe-west1-cvm-legacy-api-dev-01e2-standard-41.8%4.2%RUNNINGEUR 44EUR 44
contoso-dev-394821europe-west4-avm-testenv-dev-01n2-standard-20.9%2.8%RUNNINGEUR 28EUR 28
contoso-dev-394821europe-west1-bvm-staging-dev-02e2-standard-21.4%5.3%RUNNINGEUR 27EUR 27
contoso-dev-394821europe-west1-cvm-backup-agent-deve2-medium0.6%11.2%RUNNINGEUR 12EUR 12
contoso-dev-394821europe-west4-bvm-reporting-dev-03n1-standard-22.3%6.7%RUNNINGEUR 22EUR 22

Cloud Storage Buckets on Standard Tier (Infrequent Access) 42Effort: Medium · Confidence: Medium · Risk: Low

Cost: EUR 530| Est. Savings: EUR 0 (awareness)
⚠ These 42 buckets also appear in Category 4: Cloud Storage Without Lifecycle Policy. Savings from tier optimisation are counted there.
ProjectLocationBucketNameStorageClassEstSizeGBLastAccessDaysMonthlyCostEstSavings
contoso-dev-394821europe-west1bkt-contoso-backups-001STANDARD42045EUR 8EUR 0
contoso-dev-394821europe-west1bkt-contoso-logs-001STANDARD78062EUR 14EUR 0
contoso-dev-394821europe-west4bkt-contoso-data-exports-001STANDARD120038EUR 22EUR 0
contoso-dev-394821europe-west1bkt-contoso-ml-datasets-001STANDARD65091EUR 12EUR 0
contoso-dev-394821europe-west1bkt-contoso-archives-devSTANDARD1850120EUR 33EUR 0
contoso-dev-394821europe-west4bkt-contoso-reports-dev-001STANDARD31055EUR 6EUR 0
contoso-dev-394821europe-west1bkt-contoso-artifacts-devSTANDARD44028EUR 8EUR 0
contoso-dev-394821europe-west4bkt-contoso-temp-data-devSTANDARD28073EUR 5EUR 0

Idle Cloud SQL Instances 4Effort: Medium · Confidence: Medium · Risk: Low

Cost: EUR 205| Est. Savings: EUR 0 (governance)
ProjectRegionInstanceNameDatabaseVersionTierAvgCPUPctStorageGBMonthlyCostEstSavings
contoso-dev-394821europe-west1sql-analytics-dev-01POSTGRES_14db-n1-standard-41.2%100EUR 92EUR 0
contoso-dev-394821europe-west1sql-payments-dev-01MYSQL_8_0db-n1-standard-22.8%50EUR 52EUR 0
contoso-dev-394821europe-west4sql-reporting-dev-01POSTGRES_13db-n1-standard-20.9%30EUR 52EUR 0
contoso-dev-394821europe-west4sql-legacy-dev-01MYSQL_5_7db-f1-micro3.1%20EUR 9EUR 0

🟡 Pricing Optimization

Preemptible/Spot VM Candidates: Dev/Test Workloads 12Effort: Medium · Confidence: Low · Risk: Review

Cost: EUR 1,450| Est. Savings: EUR 549 (low confidence)
⚠ These 12 instances also appear in Category 7: Running Instances Without Instance Schedules. Both strategies are recommended; unique savings are counted once in financial totals.
ProjectZoneInstanceNameMachineTypeLabelsMonthlyCostEstSavings
contoso-dev-394821europe-west1-bvm-analytics-dev-02n2-standard-8env:dev, team:analyticsEUR 200EUR 76
contoso-dev-394821europe-west1-cvm-analytics-dev-03n2-standard-4env:dev, team:analyticsEUR 130EUR 49
contoso-dev-394821europe-west1-bvm-payments-dev-02n2-standard-4env:dev, team:paymentsEUR 130EUR 49
contoso-dev-394821europe-west4-avm-payments-dev-03n2-standard-2env:dev, team:paymentsEUR 65EUR 25
contoso-dev-394821europe-west4-avm-dataapp-dev-02n2-standard-8env:dev, team:dataEUR 200EUR 76
contoso-dev-394821europe-west4-bvm-dataapp-dev-03n2-standard-4env:dev, team:dataEUR 130EUR 49
contoso-dev-394821europe-west1-bvm-webportal-dev-01n1-standard-4env:dev, team:frontendEUR 105EUR 40
contoso-dev-394821europe-west1-cvm-webportal-dev-03n2-standard-2env:dev, team:frontendEUR 65EUR 25
contoso-dev-394821europe-west4-avm-api-gateway-dev-01n2-standard-4env:dev, team:platformEUR 130EUR 49
contoso-dev-394821europe-west4-bvm-scheduler-dev-01n1-standard-2env:dev, team:platformEUR 53EUR 20
contoso-dev-394821europe-west1-bvm-worker-dev-01n2-standard-4env:dev, team:processingEUR 130EUR 49
contoso-dev-394821europe-west1-cvm-worker-dev-02e2-standard-4env:dev, team:processingEUR 112EUR 42

Committed Use Discount Opportunities 8Effort: High · Confidence: Low · Risk: Low

Cost: EUR 680| Est. Savings: EUR 252 (low confidence)
ProjectZoneInstanceNameMachineTypeMonthsRunningMonthlyCostRecommendationEstSavings
contoso-dev-394821europe-west1-bvm-db-proxy-dev-01n1-standard-25EUR 721-year CUD: ~37% discountEUR 27
contoso-dev-394821europe-west1-cvm-cache-dev-01n1-standard-27EUR 721-year CUD: ~37% discountEUR 27
contoso-dev-394821europe-west4-avm-queue-dev-01e2-standard-24EUR 601-year CUD: ~37% discountEUR 22
contoso-dev-394821europe-west4-bvm-auth-dev-01e2-standard-26EUR 601-year CUD: ~37% discountEUR 22
contoso-dev-394821europe-west1-bvm-notifications-dev-01e2-medium5EUR 351-year CUD: ~37% discountEUR 13
contoso-dev-394821europe-west4-avm-integration-dev-01n2-standard-28EUR 1301-year CUD: ~37% discountEUR 48
contoso-dev-394821europe-west1-cvm-metrics-dev-01n1-standard-44EUR 1051-year CUD: ~37% discountEUR 39
contoso-dev-394821europe-west4-bvm-config-dev-01n2-standard-23EUR 1463-year CUD: ~55% discountEUR 54

🔵 Data & Storage Efficiency

Cloud Storage Buckets Without Lifecycle Policy 42Effort: Low · Confidence: High · Risk: Low

Cost: EUR 530| Est. Savings: EUR 261
⚠ Same 42 buckets as Category 2: Cloud Storage on Standard Tier. Implementing lifecycle rules addresses both findings simultaneously.
ProjectLocationBucketNameStorageClassEstSizeGBMonthlyCostEstSavings
contoso-dev-394821europe-west1bkt-contoso-backups-001STANDARD420EUR 8EUR 4
contoso-dev-394821europe-west1bkt-contoso-logs-001STANDARD780EUR 14EUR 7
contoso-dev-394821europe-west4bkt-contoso-data-exports-001STANDARD1200EUR 22EUR 11
contoso-dev-394821europe-west1bkt-contoso-ml-datasets-001STANDARD650EUR 12EUR 6
contoso-dev-394821europe-west1bkt-contoso-archives-devSTANDARD1850EUR 33EUR 16
contoso-dev-394821europe-west4bkt-contoso-reports-dev-001STANDARD310EUR 6EUR 3
contoso-dev-394821europe-west1bkt-contoso-artifacts-devSTANDARD440EUR 8EUR 4
contoso-dev-394821europe-west4bkt-contoso-temp-data-devSTANDARD280EUR 5EUR 2

Old Persistent Disk Snapshots (>90 Days) 12Effort: Low · Confidence: High · Risk: Low

Cost: EUR 45| Est. Savings: EUR 45
ProjectRegionSnapshotNameSourceDiskSizeGBCreatedAgeDaysMonthlyCostEstSavings
contoso-dev-394821europe-west1snap-vm-analytics-dev-01-boot-20251201disk-analytics-dev-01-boot502025-12-01183EUR 1EUR 1
contoso-dev-394821europe-west1snap-vm-analytics-dev-01-data-20251115disk-analytics-dev-01-data2002025-11-15199EUR 5EUR 5
contoso-dev-394821europe-west4snap-vm-dataapp-dev-01-data-20260110disk-dataapp-dev-01-data3502026-01-10143EUR 10EUR 10
contoso-dev-394821europe-west1snap-vm-payments-dev-01-data-20251020disk-payments-dev-01-data1002025-10-20225EUR 3EUR 3
contoso-dev-394821europe-west1snap-vm-webportal-dev-01-boot-20260214disk-webportal-dev-01-boot502026-02-14108EUR 1EUR 1
contoso-dev-394821europe-west4snap-vm-dataapp-dev-02-data-20250915disk-dataapp-dev-02-data3002025-09-15260EUR 8EUR 8
contoso-dev-394821europe-west4snap-vm-reporting-dev-01-data-20260125disk-reporting-dev-01-data1502026-01-25128EUR 4EUR 4
contoso-dev-394821europe-west1snap-vm-legacy-dev-01-data-20251128disk-legacy-dev-01-data1002025-11-28186EUR 3EUR 3
contoso-dev-394821europe-west1snap-vm-devtools-dev-01-data-20250805disk-devtools-dev-01-data802025-08-05301EUR 2EUR 2
contoso-dev-394821europe-west1snap-vm-monitoring-dev-01-20251220disk-monitoring-dev-01-data1202025-12-20164EUR 3EUR 3
contoso-dev-394821europe-west1snap-vm-webportal-dev-02-data-20260201disk-webportal-dev-02-data1002026-02-01121EUR 3EUR 3
contoso-dev-394821europe-west4snap-vm-analytics-dev-03-data-20251001disk-analytics-dev-03-data802025-10-01244EUR 2EUR 2

Artifact Registry Images Older Than 90 Days 5Effort: Low · Confidence: High · Risk: Low

Cost: EUR 24| Est. Savings: EUR 0 (governance)
ProjectRegionRepositoryNameImageNameSizeGBCreatedAgeDaysMonthlyCostEstSavings
contoso-dev-394821europe-west1analytics-dockeranalytics-api:v1.2.3452025-08-14292EUR 4EUR 0
contoso-dev-394821europe-west1payments-dockerpayments-service:v0.9.1282025-09-22253EUR 3EUR 0
contoso-dev-394821europe-west4dataapp-dockerdata-pipeline:v2.1.0622025-10-05240EUR 6EUR 0
contoso-dev-394821europe-west1devtools-dockerbuild-tools:v3.0.0852025-07-01336EUR 8EUR 0
contoso-dev-394821europe-west4webportal-dockerfrontend:v1.0.0-beta342025-11-18196EUR 3EUR 0

BigQuery Datasets Without Partition Expiry 8Effort: Low · Confidence: High · Risk: Low

Cost: EUR 1,600| Est. Savings: EUR 0 (governance)
ProjectLocationDatasetNameTableCountEstTotalGBOldestTableDaysMonthlyCostEstSavings
contoso-dev-394821EUds_analytics_events4512400847EUR 222EUR 0
contoso-dev-394821EUds_payments_transactions238200623EUR 147EUR 0
contoso-dev-394821EUds_ml_training_data1245000412EUR 810EUR 0
contoso-dev-394821EUds_reporting_metrics673800738EUR 68EUR 0
contoso-dev-394821EUds_dataapp_pipeline186500285EUR 117EUR 0
contoso-dev-394821EUds_monitoring_logs922100521EUR 38EUR 0
contoso-dev-394821USds_legacy_exports3498001120EUR 176EUR 0
contoso-dev-394821EUds_temp_analysis8120094EUR 22EUR 0

🟣 Network & Architecture

Cross-Region Resource Placement 8Effort: Medium · Confidence: Medium · Risk: Low

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ProjectResourceNameResourceTypeRegionNote
contoso-dev-394821bkt-contoso-us-exportsCloud Storageus-central1Egress costs when accessed from EU workloads (~EUR 0.08/GB)
contoso-dev-394821bkt-contoso-ml-backupCloud Storageus-east1Egress costs when accessed from EU workloads (~EUR 0.09/GB)
contoso-dev-394821sql-analytics-replicaCloud SQLus-east1Cross-region replication latency and egress charges
contoso-dev-394821repo-ci-toolsArtifact Registryus-central1Container pull egress from EU CI/CD pipelines
contoso-dev-394821repo-shared-baseArtifact Registryus-central1Container pull egress from EU CI/CD pipelines
contoso-dev-394821ds_legacy_exportsBigQueryUS (multi)Cross-region query data transfer costs
contoso-dev-394821topic-external-eventsPub/Subus-east1Message delivery egress when consumed from europe-west1
contoso-dev-394821svc-integration-apiCloud Runus-central1API call latency and cross-region egress from EU consumers

Idle VPC Peering Connections 3Effort: Medium · Confidence: Medium · Risk: Low

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ProjectRegionPeeringNamePeerNetworkStateLastTrafficDays
contoso-dev-394821globalpeer-contoso-dev-to-sharedprojects/contoso-shared-394820/global/networks/shared-vpcACTIVE45
contoso-dev-394821globalpeer-contoso-dev-to-legacyprojects/contoso-legacy-394819/global/networks/legacy-netACTIVE92
contoso-dev-394821globalpeer-contoso-dev-to-partnerprojects/partner-ext-123456/global/networks/partner-vpcACTIVE127

⚫ Governance & Visibility

Label Coverage by Resource Type 12Effort: Medium · Confidence: High · Risk: Low

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ResourceTypeTotalResourcesLabeledCountCoveragePctMissingLabelKeys
Compute Engine Instances342676%owner, cost-center
Persistent Disks785874%owner
Cloud Storage Buckets423481%cost-center
Cloud SQL Instances4375%env
Cloud VPN Tunnels5480%team
Load Balancers8675%env, team
VPC Networks3267%env, owner
VPC Firewall Rules241667%env, team
BigQuery Datasets8788%cost-center
Artifact Registry Repos5480%env
Pub/Sub Topics6583%env, owner
Cloud Run Services2150%env, team

Resources Missing Required Labels 32Effort: Medium · Confidence: High · Risk: Low

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ResourceTypeResourceNameZoneMissingLabels
Compute Enginevm-analytics-dev-01europe-west1-bowner, cost-center
Compute Enginevm-payments-dev-01europe-west1-bcost-center
Compute Enginevm-devtools-dev-03europe-west1-benv, owner
Compute Enginevm-legacy-api-dev-01europe-west1-cenv, team, owner
Persistent Diskdisk-analytics-dev-03-dataeurope-west1-benv, owner
Persistent Diskdisk-dataapp-dev-01-dataeurope-west4-aowner
Persistent Diskdisk-monitoring-dev-01-dataeurope-west4-bowner
Cloud Storagebkt-contoso-backups-001europe-west1cost-center
Cloud Storagebkt-contoso-ml-datasets-001europe-west1cost-center, owner
Cloud SQLsql-legacy-dev-01europe-west4env, team
Firewall Ruleallow-internal-devglobalenv, team
Firewall Ruleallow-ssh-devglobalenv, team
BigQueryds_temp_analysisEUcost-center, owner
Pub/Sub Topictopic-external-eventsus-east1env, owner
Cloud Runsvc-integration-apius-central1env, team

Empty / Unused VPC Firewall Rules 8Effort: Low · Confidence: Medium · Risk: Low

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ProjectNetworkRuleNameDirectionPriorityTargetTagsHitCount
contoso-dev-394821defaultallow-all-internal-oldINGRESS1000(none)0
contoso-dev-394821defaultallow-rdp-legacyINGRESS1010(none)0
contoso-dev-394821contoso-dev-vpcallow-debug-portsINGRESS900dev-instances0
contoso-dev-394821contoso-dev-vpcallow-analytics-testINGRESS950analytics-vm0
contoso-dev-394821contoso-dev-vpcdeny-legacy-egressEGRESS1100(none)0
contoso-dev-394821contoso-dev-vpcallow-vpn-oldINGRESS800vpn-clients0
contoso-dev-394821defaultallow-smtp-testINGRESS1050(none)0
contoso-dev-394821contoso-dev-vpcallow-partner-webhookINGRESS850webhook-receivers0

Missing Billing Budget Alert Coverage 7Effort: Low · Confidence: High · Risk: Low

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ServiceMonthlySpendBillingAccountBudgetConfiguredRecommendation
Compute EngineEUR 3,840BILACCT-CONTOSO-EUNoSet EUR 3,500 budget with 50%, 90%, 100% threshold alerts
BigQueryEUR 1,600BILACCT-CONTOSO-EUNoSet EUR 1,400 budget; enable on-demand spend cap for dev
Cloud StorageEUR 1,200BILACCT-CONTOSO-EUNoSet EUR 1,000 budget with anomaly detection enabled
Cloud SQLEUR 205BILACCT-CONTOSO-EUNoSet EUR 200 budget alert: SQL often grows unnoticed
Networking/EgressEUR 385BILACCT-CONTOSO-EUNoSet EUR 300 budget; cross-region egress is a hidden cost
Artifact RegistryEUR 24BILACCT-CONTOSO-EUNoInclude in umbrella project budget alert
Cloud RunEUR 44BILACCT-CONTOSO-EUNoInclude in umbrella project budget alert

Unused Service Accounts (>90 Days Inactive) 24Effort: Medium · Confidence: High · Risk: Review

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ProjectServiceAccountEmailLastUsedAgeDaysRoles
contoso-dev-394821sa-analytics-pipeline@contoso-dev-394821.iam.gserviceaccount.com2025-10-15230roles/bigquery.dataViewer
contoso-dev-394821sa-payments-backup@contoso-dev-394821.iam.gserviceaccount.com2025-08-22284roles/storage.objectCreator
contoso-dev-394821sa-data-export-old@contoso-dev-394821.iam.gserviceaccount.com2025-07-10327roles/bigquery.dataEditor
contoso-dev-394821sa-monitoring-legacy@contoso-dev-394821.iam.gserviceaccount.com2025-09-01274roles/monitoring.viewer
contoso-dev-394821sa-deploy-v1@contoso-dev-394821.iam.gserviceaccount.com2025-06-15352roles/clouddeploy.releaser
contoso-dev-394821sa-test-automation@contoso-dev-394821.iam.gserviceaccount.com2025-11-20194roles/compute.viewer
contoso-dev-394821sa-reporting-export@contoso-dev-394821.iam.gserviceaccount.com2026-01-05148roles/bigquery.dataViewer
contoso-dev-394821sa-legacy-ci@contoso-dev-394821.iam.gserviceaccount.com2025-05-20378roles/container.developer
contoso-dev-394821sa-partner-integration@contoso-dev-394821.iam.gserviceaccount.com2025-10-30215roles/pubsub.subscriber
contoso-dev-394821sa-scheduler-v1@contoso-dev-394821.iam.gserviceaccount.com2025-12-01183roles/cloudscheduler.admin

Service Accounts With Overly Broad IAM Roles 8Effort: Medium · Confidence: High · Risk: Expert

Cost: EUR 0| Est. Savings: EUR 0 (governance)
ProjectServiceAccountEmailRoleScopeRecommendation
contoso-dev-394821sa-analytics-pipeline@contoso-dev-394821.iam.gserviceaccount.comroles/editorProjectReplace with roles/bigquery.dataViewer + roles/storage.objectViewer
contoso-dev-394821sa-deploy-prod@contoso-dev-394821.iam.gserviceaccount.comroles/ownerProjectRemove: no SA requires Owner; use Workload Identity Federation
contoso-dev-394821sa-data-migration@contoso-dev-394821.iam.gserviceaccount.comroles/editorProjectReplace with task-specific data access roles scoped to datasets
contoso-dev-394821sa-ci-pipeline@contoso-dev-394821.iam.gserviceaccount.comroles/editorProjectReplace with roles/container.developer + roles/storage.admin (bucket)
contoso-dev-394821sa-monitoring-v2@contoso-dev-394821.iam.gserviceaccount.comroles/viewerProjectReplace with roles/monitoring.viewer scoped to specific resources
contoso-dev-394821sa-scheduler-v2@contoso-dev-394821.iam.gserviceaccount.comroles/editorProjectUse Workload Identity Federation for CI/CD (avoid long-lived keys)
contoso-dev-394821sa-backup-service@contoso-dev-394821.iam.gserviceaccount.comroles/editorProjectReplace with roles/storage.objectAdmin scoped to backup bucket only
contoso-dev-394821sa-external-api@contoso-dev-394821.iam.gserviceaccount.comroles/viewerProjectUse fine-grained per-resource IAM bindings instead of project-level

⚪ Behavioral Inefficiencies

Stopped Instances With Attached Disks 45Effort: Low · Confidence: High · Risk: Low

Cost: EUR 85| Est. Savings: EUR 85
ProjectZoneInstanceNameMachineTypeDiskCountStatusMonthlyCostEstSavings
contoso-dev-394821europe-west1-bvm-build-dev-01n2-standard-42TERMINATEDEUR 4EUR 4
contoso-dev-394821europe-west1-bvm-staging-dev-01n2-standard-83TERMINATEDEUR 9EUR 9
contoso-dev-394821europe-west4-avm-test-old-dev-01e2-standard-42TERMINATEDEUR 5EUR 5
contoso-dev-394821europe-west1-cvm-analytics-old-dev-01n2-standard-42TERMINATEDEUR 4EUR 4
contoso-dev-394821europe-west4-bvm-payments-old-dev-01n1-standard-22TERMINATEDEUR 3EUR 3
contoso-dev-394821europe-west1-bvm-dataapp-old-dev-01n2-highmem-43TERMINATEDEUR 8EUR 8
contoso-dev-394821europe-west1-cvm-webportal-old-dev-01e2-standard-21TERMINATEDEUR 2EUR 2
contoso-dev-394821europe-west4-avm-legacy-batch-dev-01n1-standard-43TERMINATEDEUR 7EUR 7

Running Instances Without Instance Schedules 12Effort: Medium · Confidence: High · Risk: Low

Cost: EUR 1,450| Est. Savings: EUR 870 (pre-dedup)
⚠ These 12 instances also appear in Category 3: Preemptible/Spot VM Candidates. Unique savings from both strategies are counted once; EUR 209 is the net behavioral contribution after dedup.
ProjectZoneInstanceNameMachineTypeLabelsMonthlyCostEstSavings
contoso-dev-394821europe-west1-bvm-analytics-dev-02n2-standard-8env:dev, team:analyticsEUR 200EUR 120
contoso-dev-394821europe-west1-cvm-analytics-dev-03n2-standard-4env:dev, team:analyticsEUR 130EUR 78
contoso-dev-394821europe-west1-bvm-payments-dev-02n2-standard-4env:dev, team:paymentsEUR 130EUR 78
contoso-dev-394821europe-west4-avm-payments-dev-03n2-standard-2env:dev, team:paymentsEUR 65EUR 39
contoso-dev-394821europe-west4-avm-dataapp-dev-02n2-standard-8env:dev, team:dataEUR 200EUR 120
contoso-dev-394821europe-west4-bvm-dataapp-dev-03n2-standard-4env:dev, team:dataEUR 130EUR 78
contoso-dev-394821europe-west1-bvm-webportal-dev-01n1-standard-4env:dev, team:frontendEUR 105EUR 63
contoso-dev-394821europe-west1-cvm-webportal-dev-03n2-standard-2env:dev, team:frontendEUR 65EUR 39
contoso-dev-394821europe-west4-avm-api-gateway-dev-01n2-standard-4env:dev, team:platformEUR 130EUR 78
contoso-dev-394821europe-west4-bvm-scheduler-dev-01n1-standard-2env:dev, team:platformEUR 53EUR 32
contoso-dev-394821europe-west1-bvm-worker-dev-01n2-standard-4env:dev, team:processingEUR 130EUR 78
contoso-dev-394821europe-west1-cvm-worker-dev-02e2-standard-4env:dev, team:processingEUR 112EUR 67