#!/usr/bin/env python3
"""
RELIC AUDIT GUILD v19.7 — PRODUCTION READY (Rich CLI + Integrated HTML Reports)
✅ Pre-flight credential validation
✅ Minimal IAM policy included
✅ Rate limiting (time.sleep(0.1))
✅ Legal disclaimer footer
✅ HTML report output — conversion-optimised, fully self-contained (v16)
✅ Rotating rewilding messages in progress bar
✅ Single-file — no external module dependencies beyond boto3 + rich
✅ Wildlife Relic Guild — May 2026
"""
"""
╔══════════════════════════════════════════════════════════════════════════════╗
║ RELIC AUDIT GUILD ║
║ Cloud Waste Intelligence Engine v19.7 ║
║ ║
║ "Legacy in the landscape, for your company and my family." ║
╚══════════════════════════════════════════════════════════════════════════════╝
WHAT THIS SCRIPT DOES:
Scans your AWS account across all regions for hidden, forgotten, and wasteful
cloud resources that are silently draining your budget and your planet's energy.
Results are always delivered in full. No fee. No paywall. No locked content.
ARCHITECTURE (v13.0):
Class-based RelicAuditEngine from v9.4 merged with all 14 checks from
v2.6. Warnings (data gaps) and errors (API failures) are separated throughout.
Three-tier instance type lookup. Confidence threshold on CPU idle checks.
LocalStack support for dev/test without a live AWS account.
Rich CLI interface added in v14.0 — presentation layer only, core unchanged.
HTML report output added in v15.0 — aegis_html_report.py module called after
scan. Rotating rewilding messages added to progress bar in v15.0.
v16.0: HTML report module merged into single file. No external dependencies.
Full report always delivered. Closing conversation weighs savings and kWh,
then invites voluntary donation to Mossy Earth.
MODEL:
Every scan delivers the full report — all resource IDs, all costs, all remediation.
No fee. No paywall. No locked content. The scan is always free.
If waste is found, the closing report invites a voluntary donation to Mossy Earth.
No suggested amount. No obligation. The user decides.
Account is clean — we still let you donate!
CHECKS PERFORMED (14 total):
1. Orphaned EBS Volumes — Unattached hard drives
2. Zombie Snapshots — Backups whose parent volume no longer exists
3. Stopped EC2 Instances — Servers off but still costing money
4. Unused Elastic IPs — Idle reserved IP addresses
5. Idle Load Balancers — Traffic managers with no healthy targets
6. Idle NAT Gateways — Network gateways with zero traffic (verified)
7. Stopped RDS Instances — Databases still billed for storage
8. CloudWatch Log Groups — Logs stored forever with no retention policy
9. Old ECR Container Images — Abandoned Docker images (>90 days)
10. Idle Lambda Functions — Hygiene/indirect risk (no direct cost)
11. Abandoned S3 Buckets — Storage untouched for 90+ days
12. Idle SageMaker Endpoints — AI inference endpoints (7-day status check)
13. GPU Zombie Endpoints — InService endpoints with 0 invocations/72h
14. Redundant Snapshot Lineage — Volumes with excessive snapshot accumulation
PRICING & BUSINESS MODEL:
Fee : None. This service is entirely free.
Conservation : Voluntary donation to Mossy Earth invited after scan
Your Saving : 100% of waste found is yours to reclaim
SECURITY COMMITMENTS:
- Read-Only IAM policy only — we cannot create, modify or delete anything
- No machine learning — your data never trains any model
- No credentials stored after the scan completes
- No agents, no installs, no ongoing access of any kind
RECOMMENDED IAM POLICY:
{
"Version": "2012-10-17",
"Statement": [{
"Sid": "RelicAuditReadOnly",
"Effect": "Allow",
"Action": [
"ec2:DescribeVolumes", "ec2:DescribeSnapshots", "ec2:DescribeInstances",
"ec2:DescribeAddresses", "ec2:DescribeRegions", "ec2:DescribeNatGateways",
"elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:DescribeTargetHealth",
"rds:DescribeDBInstances",
"logs:DescribeLogGroups", "logs:DescribeLogStreams",
"ecr:DescribeRepositories", "ecr:DescribeImages",
"lambda:ListFunctions", "lambda:GetFunctionConcurrency",
"s3:ListAllMyBuckets", "s3:GetBucketLocation", "s3:GetBucketLogging",
"sagemaker:ListEndpoints", "sagemaker:DescribeEndpoint",
"sagemaker:DescribeEndpointConfig",
"cloudwatch:GetMetricStatistics",
"sts:GetCallerIdentity"
],
"Resource": "*"
}]
}
REQUIREMENTS:
pip install boto3 rich
AWS credentials via: aws configure OR environment variables
LocalStack testing: set ENDPOINT_URL = "http://localhost:4566"
Single file — no other Relic modules required.
"""
import sys
import json
import logging
import time
import itertools
import threading
import os
from collections import defaultdict
from datetime import datetime, timedelta, timezone
from botocore.exceptions import NoCredentialsError, ClientError
from botocore.config import Config
import boto3
from rich.console import Console
from rich.panel import Panel
from rich.table import Table
from rich.progress import Progress, SpinnerColumn, BarColumn, TextColumn, TimeElapsedColumn
from rich.text import Text
from rich.rule import Rule
from rich import box
from rich.padding import Padding
console = Console(highlight=False)
# ─────────────────────────────────────────────────────────────────────────────
# GUILD MUSIC
# Plays a medieval music file during the scan if pygame is installed and a
# compatible audio file is found alongside the script.
# Supported formats: .mp3 .ogg .wav — place file next to this script.
# Install: pip install pygame
# Fails silently if pygame missing or no audio file found — scan unaffected.
# ─────────────────────────────────────────────────────────────────────────────
_MUSIC_EXTENSIONS = ('.mp3', '.ogg', '.wav', '.flac')
_PREFERRED_TRACK = 'watermelon_beats-medieval-folk-music-505203.mp3'
_music_playing = False
def _find_music_file():
"""Look for audio file in the same directory as this script. Preferred track first."""
script_dir = os.path.dirname(os.path.abspath(__file__))
preferred = os.path.join(script_dir, _PREFERRED_TRACK)
if os.path.isfile(preferred):
return preferred
for fname in os.listdir(script_dir):
if fname.lower().endswith(_MUSIC_EXTENSIONS):
return os.path.join(script_dir, fname)
return None
def _start_music():
"""Start playing guild music in a background thread. Silent on failure."""
global _music_playing
def _play():
global _music_playing
try:
import pygame
music_file = _find_music_file()
if not music_file:
return
pygame.mixer.init()
pygame.mixer.music.load(music_file)
pygame.mixer.music.set_volume(0.35)
pygame.mixer.music.play(-1) # loop until stopped
_music_playing = True
fname = os.path.basename(music_file)
console.print(f" [dim green]♫ Playing: {fname}[/dim green]\n")
except Exception:
pass # no pygame, no file, no problem
threading.Thread(target=_play, daemon=True).start()
def _stop_music():
"""Fade out guild music at end of scan. Silent on failure."""
global _music_playing
if not _music_playing:
return
try:
import pygame
if pygame.mixer.get_init():
pygame.mixer.music.fadeout(3000) # 3 second fade
_music_playing = False
except Exception:
pass
# ─────────────────────────────────────────────────────────────────────────────
# REWILDING PROGRESS MESSAGES
# Presentation layer only — cycles through during the region scan progress bar.
# ─────────────────────────────────────────────────────────────────────────────
REWILDING_MESSAGES = [
"🌱 Your scan helps fund native woodland in the British Isles",
"🦅 Mossy Earth has restored over 1,000 hectares of wild land",
"🐺 Wolves, lynx, bison — rewilding returns apex predators to Europe",
"🌊 Cloud waste powers data centres that warm seas. Less waste = less harm.",
"🦋 One scan can fund the planting of 200 native trees",
"🌿 Mossy Earth · Verified native rewilding · Zero greenwash",
"🐝 Pollinators collapse when habitat collapses. Rewilding reverses it.",
"🌍 The UK has lost 97% of its wildflower meadows. We fund recovery.",
"🦌 Red deer, red kite, red squirrel — all returning through rewilding",
"🌲 Mossy Earth · Verified rewilding · Donation-funded by the people this scan serves.",
"🪸 Kelp forests sequester CO₂ 35× faster than terrestrial forest",
"🐺 Rewilding Britain — one neglected cloud resource at a time",
"🌾 No waste found = a clean account. The scan is always free.",
"🌻 The audit takes minutes. The forest takes decades. Start now.",
"📋 Your audit is ESG-reportable — cost saving, CO₂ reduction, conservation funding",
"🌐 CSRD & Scope 3 reporting now mandatory. Cloud waste is in the frame.",
]
_rewilding_cycle = itertools.cycle(REWILDING_MESSAGES)
def _next_rewilding_msg():
"""Return the next message in the rotating rewilding cycle."""
return next(_rewilding_cycle)
# ─────────────────────────────────────────────────────────────────────────────
# LOGGING
# ─────────────────────────────────────────────────────────────────────────────
logging.basicConfig(
level=logging.INFO,
format='%(asctime)s %(levelname)-8s %(message)s'
)
logger = logging.getLogger('relic')
# ─────────────────────────────────────────────────────────────────────────────
# CONFIGURATION
# ─────────────────────────────────────────────────────────────────────────────
ENDPOINT_URL = None # LocalStack: "http://localhost:4566"
# Pricing (GBP, eu-west-2 rates — ⚠ update annually)
EBS_GBP_PER_GB_MONTH = 0.079
SNAPSHOT_GBP_PER_GB = 0.053
ELASTIC_IP_COST_PER_MONTH= 3.60
LB_COST_PER_MONTH = 15.00
RDS_STORAGE_GBP_PER_GB = 0.115
LOGS_GBP_PER_GB = 0.03
ECR_GBP_PER_GB = 0.10
NAT_GBP_PER_MONTH = 27.00
S3_GBP_PER_GB = 0.023
SAGEMAKER_ML_T3_MEDIUM = 0.056 # £/hour floor for unknown SM instances
# GPU endpoint costs (£/hour) — for Check 13
SAGEMAKER_GPU_COSTS = {
'ml.p2.xlarge': 0.900,
'ml.p3.2xlarge': 3.825,
'ml.p3.8xlarge': 15.300,
'ml.p3.16xlarge': 30.600,
'ml.g4dn.xlarge': 0.526,
'ml.g4dn.2xlarge': 0.940,
'ml.g4dn.4xlarge': 1.505,
'ml.g4dn.8xlarge': 2.720,
'ml.g4dn.12xlarge':4.075,
'ml.g5.xlarge': 1.006,
'ml.g5.2xlarge': 1.210,
'ml.g5.4xlarge': 1.620,
'ml.g5.8xlarge': 2.440,
}
# EC2 instance data (watts, USD/month) — three-tier lookup
INSTANCE_DATA = {
't3.nano': {'w': 2, 'cost': 3.80},
't3.micro': {'w': 4, 'cost': 7.60},
't3.small': {'w': 8, 'cost': 15.00},
't3.medium': {'w': 12, 'cost': 30.00},
'm5.large': {'w': 25, 'cost': 70.00},
'm5.xlarge': {'w': 45, 'cost': 140.00},
'c5.large': {'w': 30, 'cost': 62.00},
'c5.xlarge': {'w': 60, 'cost': 124.00},
'p3.2xlarge': {'w': 150, 'cost': 918.00},
't3': {'w': 8, 'cost': 15.00}, # family fallback
'default': {'w': 15, 'cost': 25.00}, # last resort
}
USD_TO_GBP = 0.79 # ⚠ update periodically
# Boto3 connection config — prevents hanging on slow/rural connections
from botocore.config import Config
BOTO_CONFIG = Config(
connect_timeout=5,
read_timeout=10,
retries={'max_attempts': 2, 'mode': 'standard'}
)
# Thresholds
ZOMBIE_SNAPSHOT_AGE_DAYS = 90
S3_IDLE_DAYS = 90
LAMBDA_IDLE_DAYS = 90
GPU_ZOMBIE_IDLE_HOURS = 72
SNAPSHOT_LINEAGE_THRESHOLD= 30
SNAPSHOT_LINEAGE_AGE_DAYS = 90
IDLE_THRESHOLD = 5.0 # % CPU below which instance is idle
IDLE_MIN_RATIO = 0.90 # 90% of hourly points must be idle
MIN_DATA_POINTS = 20 # minimum CW points for confidence
# Business model
AEGIS_FEE_CAP_GBP = 0.00 # No fee — service is free
MOSSY_EARTH_SPLIT = 0.80
AEGIS_SPLIT = 0.00 # No fee split
# Energy / CO₂ (UK grid)
KWH_PER_GB_STORAGE_MONTH = 0.000392
KWH_PER_HOUR_COMPUTE = 0.08
CO2_KG_PER_KWH = 0.233
# Priority and effort maps
PRIORITY = {
'gpu_zombies': ('CRITICAL', '★★★'),
'sagemaker': ('CRITICAL', '★★★'),
'instances': ('HIGH', '★★☆'),
'nat_gateways': ('HIGH', '★★☆'),
'load_balancers': ('HIGH', '★★☆'),
'rds_instances': ('HIGH', '★★☆'),
's3_buckets': ('HIGH', '★★☆'),
'volumes': ('HIGH', '★★☆'),
'snap_lineage': ('MEDIUM', '★☆☆'),
'snapshots': ('MEDIUM', '★☆☆'),
'elastic_ips': ('LOW', '☆☆☆'),
'ecr_images': ('LOW', '☆☆☆'),
'cloudwatch_logs': ('LOW', '☆☆☆'),
'lambda_functions': ('LOW', '☆☆☆'),
}
EFFORT = {
'gpu_zombies': ('2 min', 'Delete endpoint in SageMaker console'),
'sagemaker': ('2 min', 'Delete endpoint in SageMaker console'),
'instances': ('5 min', 'Terminate via EC2 console — create AMI first if unsure'),
'nat_gateways': ('5 min', 'Delete via VPC console — remove route table entries first'),
'load_balancers': ('2 min', 'Delete via EC2 console > Load Balancers'),
'rds_instances': ('5 min', 'Delete via RDS console — take final snapshot if needed'),
's3_buckets': ('10 min', 'Empty bucket then delete — or archive to Glacier'),
'volumes': ('2 min', 'Delete via EC2 console > Volumes'),
'snap_lineage': ('15 min', 'Delete oldest snapshots in batches via EC2 console'),
'snapshots': ('5 min', 'Delete via EC2 console > Snapshots'),
'elastic_ips': ('1 min', 'Release via EC2 console > Elastic IPs'),
'ecr_images': ('5 min', 'Delete old images or set lifecycle policy to auto-expire'),
'cloudwatch_logs': ('3 min', 'Set retention policy via CloudWatch > Log Groups'),
'lambda_functions': ('10 min', 'Review triggers then delete unused functions'),
}
# Boto3 retry
BOTO_CONFIG = Config(retries={'max_attempts': 5, 'mode': 'adaptive'})
W = 76 # report width (kept for summary box rendering)
# ─────────────────────────────────────────────────────────────────────────────
# RICH DISPLAY HELPERS
# Presentation layer only — audit logic is untouched.
# Colour scheme (Section 11 spec):
# green → savings, eco, clean results
# orange → waste findings
# red → critical priority
# grey → secondary / info text
# ─────────────────────────────────────────────────────────────────────────────
def banner(text):
"""Opening and section banners — rendered as a rich Panel."""
lines = text.strip().split('\n')
content = Text(justify="center")
for i, line in enumerate(lines):
if i == 0:
content.append(line + "\n", style="bold green")
elif i == 1:
content.append(line + "\n", style="italic dim white")
else:
content.append(line + "\n", style="dim white")
console.print()
console.print(Panel(content, border_style="green", padding=(0, 2)))
def section(title):
"""Per-check section header."""
console.print()
console.print(Rule(f"[bold white]{title}[/bold white]", style="dim white"))
def row(label, value):
"""Key-value data row."""
console.print(f" [dim white]{label:<46}[/dim white] [bold orange1]{value}[/bold orange1]")
def ok(msg):
"""Clean / success message."""
console.print(f" [bold green]✓[/bold green] [green]{msg}[/green]")
def warn(msg):
"""Warning — data gap or caution."""
console.print(f" [bold yellow]⚠[/bold yellow] [yellow]{msg}[/yellow]")
def info(msg):
"""Neutral informational message."""
console.print(f" [dim cyan]ℹ[/dim cyan] [cyan]{msg}[/cyan]")
def storage_co2(gb):
return gb * KWH_PER_GB_STORAGE_MONTH * CO2_KG_PER_KWH
def co2_for_cost(monthly_gbp):
return (monthly_gbp / 0.30) * KWH_PER_HOUR_COMPUTE * 730 * CO2_KG_PER_KWH
# ─────────────────────────────────────────────────────────────────────────────
# HTML REPORT — CONVERSION-OPTIMISED CLOSING DOCUMENT
# Presentation layer only. Uses constants already defined above.
# Full report always delivered. Closing conversation invites voluntary Mossy Earth donation.
# ─────────────────────────────────────────────────────────────────────────────
# Category labels for HTML report (keyed to audit_data buckets)
_HTML_LABELS = {
'volumes': 'Orphaned EBS Volumes',
'snapshots': 'Zombie Snapshots',
'instances': 'Stopped EC2 Instances',
'elastic_ips': 'Idle Elastic IPs',
'load_balancers': 'Idle Load Balancers',
'nat_gateways': 'Idle NAT Gateways',
'rds_instances': 'Stopped RDS Instances',
'cloudwatch_logs': 'Log Groups (No Retention)',
'ecr_images': 'Old ECR Images',
'lambda_functions': 'Idle Lambda Functions',
's3_buckets': 'Abandoned S3 Buckets',
'sagemaker': 'Idle SageMaker Endpoints',
'gpu_zombies': 'GPU Zombie Endpoints \u2605',
'snap_lineage': 'Redundant Snapshot Lineage',
}
# Priority labels for HTML (string only — HTML doesn't use the star tuples)
_HTML_PRIORITY = {
'gpu_zombies': 'CRITICAL',
'sagemaker': 'CRITICAL',
'instances': 'HIGH',
'nat_gateways': 'HIGH',
'load_balancers': 'HIGH',
'rds_instances': 'HIGH',
's3_buckets': 'HIGH',
'volumes': 'HIGH',
'snap_lineage': 'MEDIUM',
'snapshots': 'MEDIUM',
'elastic_ips': 'LOW',
'ecr_images': 'LOW',
'cloudwatch_logs': 'LOW',
'lambda_functions': 'LOW',
}
# Risk metadata per check — deletion risk level, verification advice, snapshot needed
# Shown in the findings table and safety panel to prevent accidental removal
_HTML_RISK = {
'gpu_zombies': {'level': 'HIGH', 'snapshot': False, 'days': 7,
'advice': 'Verify no active inference jobs before stopping. Check CloudWatch invocations.'},
'sagemaker': {'level': 'HIGH', 'snapshot': False, 'days': 7,
'advice': 'Confirm with the ML team. Endpoints may serve infrequent batch jobs.'},
'instances': {'level': 'HIGH', 'snapshot': True, 'days': 7,
'advice': 'Tag or snapshot before terminating. Stopped instances may hold data.'},
'rds_instances': {'level': 'HIGH', 'snapshot': True, 'days': 14,
'advice': 'Take a final snapshot. Confirm no scheduled jobs or reporting queries depend on this.'},
'nat_gateways': {'level': 'MEDIUM', 'snapshot': False, 'days': 7,
'advice': 'Check for private subnet resources routing through this gateway before deletion.'},
'load_balancers': {'level': 'MEDIUM', 'snapshot': False, 'days': 7,
'advice': 'Verify no DNS records or services still point to this load balancer.'},
's3_buckets': {'level': 'HIGH', 'snapshot': True, 'days': 14,
'advice': 'Enable versioning or download contents before deletion. S3 deletions are irreversible.'},
'volumes': {'level': 'MEDIUM', 'snapshot': True, 'days': 7,
'advice': 'Create a snapshot before deleting. Unattached does not always mean unused.'},
'snap_lineage': {'level': 'LOW', 'snapshot': False, 'days': 7,
'advice': 'Review the full snapshot chain. Keep the most recent in any active lineage.'},
'snapshots': {'level': 'LOW', 'snapshot': False, 'days': 7,
'advice': 'Verify these are not the only recovery point for a production volume.'},
'elastic_ips': {'level': 'LOW', 'snapshot': False, 'days': 3,
'advice': 'Check Route53 and DNS records. Some teams hard-code IPs in firewall rules.'},
'ecr_images': {'level': 'LOW', 'snapshot': False, 'days': 7,
'advice': 'Confirm no pipelines reference these image tags before removal.'},
'cloudwatch_logs': {'level': 'LOW', 'snapshot': False, 'days': 7,
'advice': 'Check compliance requirements. Some industries mandate log retention periods.'},
'lambda_functions': {'level': 'LOW', 'snapshot': False, 'days': 7,
'advice': 'Verify no scheduled triggers or event sources invoke this function infrequently.'},
}
_HTML_CSS = """
:root{--forest:#2f5d4a;--forest-lt:#3d7a61;--forest-dim:#182e24;
--amber:#d4833a;--amber-lt:#e8a05a;--ash:#0b0e12;--slate:#13181f;
--slate-lt:#1a2130;--mist:#e4e7ea;--mist-dim:#7a8490;--red:#b84035;--red-lt:#d05040;}
*{box-sizing:border-box;margin:0;padding:0;}
body{background:var(--ash);color:var(--mist);font-family:'Crimson Pro',Georgia,serif;
font-weight:300;line-height:1.6;min-height:100vh;}
.mission-strip{background:var(--forest);text-align:center;padding:9px 20px;
font-family:'Space Mono',monospace;font-size:10px;letter-spacing:2px;
color:rgba(255,255,255,.8);text-transform:uppercase;overflow:hidden;position:relative;}
.mission-strip::before{content:'';position:absolute;inset:0;
background:repeating-linear-gradient(90deg,transparent,transparent 40px,
rgba(255,255,255,.03) 40px,rgba(255,255,255,.03) 41px);}
.mission-strip span{position:relative;}
.mossy-name{color:#fff;font-weight:700;}
header{padding:44px 30px 32px;max-width:920px;margin:auto;}
.eyebrow{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:4px;
color:var(--forest-lt);text-transform:uppercase;margin-bottom:12px;}
.brand{font-family:'Space Mono',monospace;font-size:clamp(16px,3vw,24px);
font-weight:700;color:var(--forest-lt);letter-spacing:1px;margin-bottom:16px;}
.headline{font-size:clamp(20px,3.5vw,32px);font-weight:300;line-height:1.35;
max-width:700px;margin-bottom:10px;}
.hl-amber{color:var(--amber);}
.hl-red{color:var(--red-lt);}
.subhead{font-size:16px;color:var(--mist-dim);font-style:italic;
max-width:580px;line-height:1.75;margin-bottom:20px;}
.badge-row{display:flex;flex-wrap:wrap;gap:8px;}
.badge{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:1px;
padding:4px 11px;border-radius:3px;text-transform:uppercase;}
.bg{background:rgba(47,93,74,.18);color:var(--forest-lt);border:1px solid rgba(47,93,74,.45);}
.ba{background:rgba(212,131,58,.13);color:var(--amber-lt);border:1px solid rgba(212,131,58,.38);}
.br{background:rgba(184,64,53,.13);color:#d06050;border:1px solid rgba(184,64,53,.38);}
.container{max-width:920px;margin:0 auto;padding:0 30px 60px;overflow-x:hidden;box-sizing:border-box;}
.summary-box{background:var(--slate);border:1px solid #1c2530;
border-top:3px solid var(--red-lt);border-radius:8px;padding:28px 30px;margin-bottom:16px;}
.summary-title{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:3px;
color:var(--mist-dim);text-transform:uppercase;margin-bottom:18px;}
.summary-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:20px;margin-bottom:20px;}
.summary-stat{text-align:center;padding:16px;background:var(--slate-lt);
border-radius:6px;border-bottom:3px solid var(--amber);}
.summary-stat.red-border{border-bottom-color:var(--red-lt);}
.summary-stat.green-border{border-bottom-color:var(--forest-lt);}
.ss-value{font-family:'Space Mono',monospace;font-size:24px;font-weight:700;
color:var(--amber);line-height:1;margin-bottom:5px;}
.ss-value.red{color:var(--red-lt);}
.ss-value.green{color:var(--forest-lt);}
.ss-label{font-family:'Space Mono',monospace;font-size:9px;letter-spacing:2px;
color:var(--mist-dim);text-transform:uppercase;}
.efficiency-row{display:flex;align-items:center;gap:14px;
padding:14px 18px;background:var(--slate-lt);border-radius:6px;}
.eff-label{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:1px;
color:var(--mist-dim);text-transform:uppercase;white-space:nowrap;}
.eff-track{flex:1;height:6px;background:#1a2030;border-radius:3px;overflow:hidden;}
.eff-fill{height:100%;border-radius:3px;
background:linear-gradient(90deg,var(--red-lt),var(--amber),var(--forest-lt));}
.eff-pct{font-family:'Space Mono',monospace;font-size:13px;font-weight:700;
color:var(--amber);white-space:nowrap;}
.findings-panel{background:var(--slate);border:1px solid #1c2530;
border-radius:8px;margin-bottom:16px;overflow:hidden;}
.panel-header{padding:15px 22px;border-bottom:1px solid #1c2530;
display:flex;justify-content:space-between;align-items:center;}
.panel-title{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:2px;
color:var(--mist-dim);text-transform:uppercase;}
.panel-count{font-family:'Space Mono',monospace;font-size:10px;color:var(--amber);}
table{width:100%;border-collapse:collapse;}
thead th{font-family:'Space Mono',monospace;font-size:9px;letter-spacing:2px;
text-transform:uppercase;color:var(--forest-lt);padding:10px 18px;
text-align:left;border-bottom:1px solid #1c2530;}
tbody td{padding:12px 18px;border-bottom:1px solid #0f1520;vertical-align:top;}
tbody tr:last-child td{border-bottom:none;}
tbody tr:hover td{background:rgba(255,255,255,.012);}
.finding-name{font-size:15px;color:var(--mist);}
.finding-cost{font-family:'Space Mono',monospace;font-size:13px;
color:var(--amber);white-space:nowrap;}
.detail-cell{font-size:13px;color:#6a7a8a;line-height:1.65;}
.priority-tag{font-family:'Space Mono',monospace;font-size:9px;letter-spacing:1px;
padding:3px 8px;border-radius:3px;text-transform:uppercase;display:inline-block;}
.pri-critical{background:rgba(184,64,53,.15);color:#d05040;border:1px solid rgba(184,64,53,.38);}
.pri-high{background:rgba(212,131,58,.12);color:var(--amber-lt);border:1px solid rgba(212,131,58,.33);}
.pri-medium{background:rgba(200,170,80,.1);color:#c8aa50;border:1px solid rgba(200,170,80,.28);}
.pri-low{background:rgba(100,120,140,.1);color:#6a7f90;border:1px solid rgba(100,120,140,.22);}
.eco-panel{background:var(--forest-dim);border:1px solid rgba(47,93,74,.45);
border-radius:8px;padding:28px 30px;margin-bottom:16px;position:relative;overflow:hidden;}
.eco-panel::before{content:'\U0001f331';position:absolute;right:-6px;top:-6px;
font-size:100px;opacity:.05;transform:rotate(12deg);pointer-events:none;}
.eco-eyebrow{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:3px;
color:var(--forest-lt);text-transform:uppercase;margin-bottom:12px;}
.eco-headline{font-size:20px;font-weight:300;color:#fff;line-height:1.5;
margin-bottom:16px;max-width:560px;}
.eco-headline em{color:var(--forest-lt);font-style:italic;}
.eco-impact-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:12px;margin-bottom:18px;}
.eco-card{background:rgba(0,0,0,.22);border:1px solid rgba(47,93,74,.28);
border-radius:5px;padding:14px 16px;text-align:center;}
.eco-card-value{font-family:'Space Mono',monospace;font-size:20px;font-weight:700;
color:var(--forest-lt);line-height:1;margin-bottom:4px;}
.eco-card-label{font-family:'Space Mono',monospace;font-size:9px;letter-spacing:2px;
color:rgba(255,255,255,.38);text-transform:uppercase;}
.eco-body{font-size:14px;color:rgba(255,255,255,.55);line-height:1.8;max-width:540px;}
.eco-footer{font-family:'Space Mono',monospace;font-size:10px;color:rgba(255,255,255,.3);
margin-top:16px;border-top:1px solid rgba(47,93,74,.2);padding-top:13px;letter-spacing:.5px;}
.eco-footer a{color:var(--forest-lt);text-decoration:none;}
.decision-panel{background:linear-gradient(160deg,#0d1f18,#111a24);
border:1px solid rgba(47,93,74,.5);border-top:3px solid var(--forest-lt);
border-radius:8px;padding:32px 30px;margin-bottom:16px;}
.decision-trigger{font-size:17px;font-weight:300;color:#fff;line-height:1.6;
max-width:620px;margin-bottom:24px;border-left:3px solid var(--forest-lt);
padding-left:18px;}
.decision-trigger em{color:var(--forest-lt);font-style:normal;font-weight:400;}
.three-pillar{display:grid;grid-template-columns:repeat(3,1fr);gap:12px;margin-bottom:20px;}
.pillar{background:rgba(0,0,0,.25);border-radius:6px;padding:18px 16px;}
.pillar-financial{border-top:3px solid var(--red-lt);}
.pillar-efficiency{border-top:3px solid var(--amber);}
.pillar-impact{border-top:3px solid var(--forest-lt);}
.pillar-label{font-family:'Space Mono',monospace;font-size:9px;letter-spacing:2px;
text-transform:uppercase;margin-bottom:10px;}
.pillar-financial .pillar-label{color:var(--red-lt);}
.pillar-efficiency .pillar-label{color:var(--amber);}
.pillar-impact .pillar-label{color:var(--forest-lt);}
.pillar-value{font-family:'Space Mono',monospace;font-size:20px;font-weight:700;
line-height:1;margin-bottom:4px;}
.pillar-financial .pillar-value{color:var(--red-lt);}
.pillar-efficiency .pillar-value{color:var(--amber);}
.pillar-impact .pillar-value{color:var(--forest-lt);}
.pillar-sub{font-size:12px;color:rgba(255,255,255,.38);line-height:1.5;margin-top:4px;}
.pillar-note{font-size:11px;color:rgba(255,255,255,.22);margin-top:6px;font-style:italic;}
.decision-vow{font-family:'Space Mono',monospace;font-size:10px;letter-spacing:1px;
color:rgba(255,255,255,.28);border-top:1px solid rgba(47,93,74,.2);
padding-top:14px;margin-top:4px;}
.badge-panel{background:var(--slate);border:1px solid #1c2530;
border-radius:8px;padding:28px 30px;margin-bottom:16px;text-align:center;}
.safety-panel{background:#1a1200;border:1px solid #5a3a00;border-left:4px solid #e8a05a;
border-radius:6px;padding:22px 26px;margin-bottom:20px;}
.safety-panel-title{font-family:'Space Mono',monospace;font-size:11px;letter-spacing:2px;
text-transform:uppercase;color:var(--amber-lt);margin-bottom:12px;}
.safety-panel-body{font-size:14px;color:rgba(255,255,255,.72);line-height:1.75;}
.safety-panel-body strong{color:var(--amber-lt);}
.safety-rules{margin-top:14px;display:flex;flex-direction:column;gap:8px;}
.safety-rule{display:flex;align-items:flex-start;gap:10px;font-size:13px;
color:rgba(255,255,255,.62);line-height:1.6;}
.safety-rule-icon{flex-shrink:0;font-size:14px;margin-top:1px;}
.risk-badge{display:inline-block;padding:2px 7px;border-radius:3px;
font-family:'Space Mono',monospace;font-size:9px;font-weight:700;
letter-spacing:.08em;text-transform:uppercase;margin-left:6px;vertical-align:middle;}
.risk-high{background:rgba(184,64,53,.2);color:#e87060;border:1px solid rgba(184,64,53,.4);}
.risk-medium{background:rgba(212,131,58,.2);color:var(--amber-lt);border:1px solid rgba(212,131,58,.4);}
.risk-low{background:rgba(61,122,97,.2);color:var(--forest-lt);border:1px solid rgba(61,122,97,.4);}
.snap-badge{display:inline-block;padding:2px 6px;border-radius:3px;
font-family:'Space Mono',monospace;font-size:9px;letter-spacing:.06em;
background:rgba(91,156,246,.15);color:#7ab4f8;border:1px solid rgba(91,156,246,.25);
margin-left:5px;vertical-align:middle;}
.finding-advice{font-size:11px;color:rgba(255,255,255,.38);font-style:italic;
line-height:1.55;margin-top:5px;padding-top:5px;border-top:1px solid rgba(255,255,255,.06);}
.verify-days{font-family:'Space Mono',monospace;font-size:9px;color:rgba(255,255,255,.3);
letter-spacing:.06em;text-transform:uppercase;margin-top:4px;}
.footer-strip{text-align:center;padding:16px 30px;font-family:'Space Mono',monospace;
font-size:10px;letter-spacing:1px;color:#252f3a;text-transform:uppercase;
border-top:1px solid #131a22;max-width:920px;margin:0 auto;}
.footer-strip a{color:var(--forest);text-decoration:none;}
@media(max-width:620px){
.summary-grid{grid-template-columns:1fr 1fr;}
.eco-impact-grid{grid-template-columns:1fr 1fr;}
header,.container{padding-left:18px;padding-right:18px;}
}
"""
# ── HTML data helpers ─────────────────────────────────────────────────────────
def _html_extract_findings(audit_data):
"""Extract and sort findings from audit_data for HTML rendering."""
findings = []
for key, label in _HTML_LABELS.items():
bucket = audit_data.get(key, {})
count = bucket.get('count', 0)
cost = bucket.get('monthly_cost', 0.0)
items = bucket.get('items', [])
if count > 0:
findings.append({
'key': key,
'category': label,
'priority': _HTML_PRIORITY.get(key, 'LOW'),
'count': count,
'monthly_cost': cost,
'items': items,
})
findings.sort(key=lambda f: f['monthly_cost'], reverse=True)
return findings
def _html_build_fee_data(audit_data):
"""Compute financial and environmental metrics for the HTML report."""
keys = [k for k in audit_data if isinstance(audit_data[k], dict)
and 'monthly_cost' in audit_data[k]]
total_monthly = sum(audit_data[k]['monthly_cost'] for k in keys)
total_annual = total_monthly * 12
total_gb_waste = (
audit_data.get('volumes', {}).get('count', 0) * 100 +
audit_data.get('snapshots', {}).get('count', 0) * 50 +
audit_data.get('s3_buckets', {}).get('count', 0) * 200
)
co2_storage = total_gb_waste * KWH_PER_GB_STORAGE_MONTH * CO2_KG_PER_KWH
co2_compute = ((total_monthly / 0.30) * KWH_PER_HOUR_COMPUTE * 730 * CO2_KG_PER_KWH
if total_monthly > 0 else 0.0)
total_co2 = co2_storage + co2_compute
co2_annual_t = (total_co2 * 12) / 1000
efficiency = max(0, min(100, int(100 - (total_monthly / 10))))
kwh_avoided = (total_gb_waste * KWH_PER_GB_STORAGE_MONTH * 12 +
(total_monthly / 0.30) * KWH_PER_HOUR_COMPUTE * 730 * 12
if total_monthly > 0 else 0.0)
return {
'total_monthly': total_monthly,
'total_annual': total_annual,
'total_co2': total_co2,
'co2_annual_t': co2_annual_t,
'efficiency': efficiency,
'kwh_avoided': kwh_avoided,
}
def _html_priority_class(priority):
return {'CRITICAL': 'pri-critical', 'HIGH': 'pri-high',
'MEDIUM': 'pri-medium', 'LOW': 'pri-low'}.get(priority, 'pri-low')
def _html_full_table_rows(findings):
"""Full unlocked table — real IDs, real costs, risk badges, per-finding advice."""
if not findings:
return ('
'
'\u2713 No waste found \u2014 this account is running clean.
')
rows = ''
for f in findings:
pc = _html_priority_class(f['priority'])
risk = _HTML_RISK.get(f['key'], {'level':'LOW','snapshot':False,
'days':7,'advice':''})
rc = {'HIGH':'risk-high','MEDIUM':'risk-medium','LOW':'risk-low'}.get(
risk['level'], 'risk-low')
snap = ('\U0001f4f8 Snapshot first'
if risk['snapshot'] else '')
details = []
for item in f['items'][:3]:
rid = (item.get('id') or item.get('ip') or item.get('name') or
item.get('vol_id') or '\u2014')
cost = item.get('monthly_cost', 0)
details.append(f"{rid} \u00b7 \u00a3{cost:.2f}/mo")
if len(f['items']) > 3:
details.append(f"\u2026 and {len(f['items']) - 3} more")
rows += (
f'
'
f'
{f["category"]}
'
f'
{f["priority"]}
'
f'
\u00a3{f["monthly_cost"]:.2f}/mo
'
f'
'
f'{risk["level"]} RISK{snap}'
f'
\u23f3 Verify {risk["days"]}d before acting
'
f'
'
f'
{" ".join(details)}'
f'
{risk["advice"]}
'
f'
'
f'
'
)
return rows
def _html_safety_panel():
"""
Pre-findings safety panel. Displayed above every findings table.
Protects users from accidental deletion — especially on untagged resources.
Based on real-world FinOps practice: 7-day notice minimum, snapshots first.
"""
return (
f'
'
f'
\u26a0\ufe0f Before You Act on Any Finding
'
f'
'
f'Relic identifies candidates, not verdicts. '
f'Untagged or idle does not always mean abandoned. '
f'Resources may belong to infrequent workloads, scheduled jobs, '
f'or infrastructure nobody documented. Verify with your team before removing anything.'
f'
'
f'
'
f'\U0001f4f8'
f'Snapshot storage first. '
f'EBS volumes, RDS instances, and S3 buckets marked for deletion should be '
f'snapshotted or backed up before removal. Deletions are irreversible.'
f'
'
f'
'
f'\u23f3'
f'Give your team notice. '
f'Industry consensus is a minimum 7-day internal warning before acting on findings. '
f'Email, not just Slack. People are busy. Learning is a process.'
f'
'
f'
'
f'\U0001f3f7\ufe0f'
f'Tag before you touch. '
f'If a resource has no tags, add an owner tag before deciding its fate. '
f'A 10-minute tagging exercise prevents a 10-hour recovery incident.'
f'
'
f'
'
f'\U0001f50d'
f'Check CloudWatch first. '
f'Low average CPU can mask infrequent but critical batch workloads. '
f'Review the last 30 days of metrics, not just the last 24 hours.'
f'
\n')
def _html_page_footer(scan_date, regions, duration):
return (
f'\n\n'
)
def _html_linkedin_share_panel(account, monthly_waste):
"""
LinkedIn share flow + Mossy Earth donation nudge.
This scan is free. No fee, no cut, no suggestion.
The user decides. That's the point.
"""
has_waste = monthly_waste > 0
monthly_str = f"\u00a3{monthly_waste:,.2f}" if has_waste else None
if has_waste:
nudge_headline = f"Your cloud wastes {monthly_str} every month."
nudge_body = (
f"That\u2019s {monthly_str} silently disappearing into idle infrastructure. "
f"The waste is real. So is what Mossy Earth does with money that goes their way instead. "
f"Native woodland. Peatland recovery. Species reintroduction. Verified."
)
li_text = (
f"Just ran a free 14-point cloud audit on our AWS account.\n\n"
f"Found {monthly_str}/month in idle, forgotten resources.\n\n"
f"The audit was free. The waste is real. "
f"We\u2019re putting some of those savings toward native rewilding via Mossy Earth \u2014 "
f"habitat restoration, species reintroduction, verified conservation.\n\n"
f"If your team hasn\u2019t checked recently, worth 10 minutes. "
f"\u2192 https://wildliferelicguild.com"
f"?utm_source=linkedin&utm_medium=share&utm_campaign=waste_found"
)
share_headline = "Found waste? Share it."
share_sub = "Turn your audit result into a conservation conversation."
utm_campaign = "waste_found"
else:
nudge_headline = "Account is clean — we still let you donate!"
nudge_body = (
"No cloud waste found \u2014 your infrastructure is already running lean. "
"That\u2019s genuinely rare. "
"Mossy Earth do verified native rewilding. No greenwash."
)
li_text = (
f"Just ran a free 14-point cloud audit on our AWS account \u2014 account is clean.\n\n"
f"No idle resources, no hidden waste.\n\n"
f"Used Wildlife Relic Guild: read-only, 14 checks, free. "
f"Marking it with a donation to Mossy Earth for native rewilding.\n\n"
f"\u2192 https://wildliferelicguild.com"
f"?utm_source=linkedin&utm_medium=share&utm_campaign=clean_account"
)
share_headline = "Clean account. Share the standard."
share_sub = "Let your network know efficient infrastructure is an ecological act."
utm_campaign = "clean_account"
li_share_url = (
f"https://www.linkedin.com/sharing/share-offsite/?url="
f"https%3A%2F%2Fwildliferelicguild.com%3Futm_source%3Dlinkedin%26utm_medium%3Dshare"
f"%26utm_campaign%3D{utm_campaign}"
)
# Annual and kWh figures for the conversation
annual_waste = monthly_waste * 12
kwh_monthly = (monthly_waste / 0.30) * 0.08 * 730 if has_waste else 0
kwh_annual = kwh_monthly * 12
annual_str = f"\u00a3{annual_waste:,.2f}"
kwh_str = f"{kwh_annual:,.0f} kWh"
conv_text = (
f'
You just found {monthly_str} a month '
f'leaving your account for nothing. Over a year, that\u2019s '
f'{annual_str}.
'
f'
It\u2019s not just money. Those idle resources '
f'are drawing roughly {kwh_str} of electricity a year '
f'\u2014 servers humming, storage spinning, network ports held open '
f'for workloads that no longer exist.
'
f'
You can reclaim all of it. The report above '
f'tells you exactly where it is and how to shut it down. '
f'That\u2019s yours \u2014 free, no strings.
'
f'
Mossy Earth are doing something real '
f'\u2014 native woodland, peatland, species coming back to landscapes '
f'that lost them. Verified. No offsets. Actual land.
'
) if has_waste else (
f'
No waste. Nothing idle. Your account is clean.
'
f'
That\u2019s not the default. Most accounts '
f'accumulate forgotten resources quietly for years. '
f'Yours doesn\u2019t. That means no wasted spend and no electricity '
f'drawn by infrastructure that serves no one.
'
f'
The scan was free. The result is clean. '
f'Mossy Earth are doing something real if you want to mark the occasion '
f'\u2014 native woodland, peatland, species returning to landscapes '
f'that lost them. Verified. No offsets. Actual land.
'
)
return (
f'
'
f'
\U0001f331 Before you go
'
# ── Shoulder: conversation + donation side by side ────────────────────
f'
'
f'
{conv_text}
'
# ── Donation column — no amount, just a direct link ───────────────────
f'
'
f'
Mossy Earth \u00b7 Rewilding Membership
'
f'
'
f'Native woodland. Peatland. Species reintroduction. '
f'No carbon credits. Actual land.