DG Global Guard

Overview

Live Bedrock spend of every allowed account, all regions, re-measured every 5 minutes.

–

Bedrock spend today, all allowed accounts

–

this month

–

accounts blocked

–

accounts past warning

Spend today, last 24 hours

all allowed accounts, 5-minute samples

Top 5

by Bedrock spend

Today

Account	Today

This week (last 7 days)

Account	Week

This month

Account	Month

Non-allowed Bedrock spend

Cost Explorer, every 6 hours

– in the last 2 days on accounts that are not allowed

Accounts

Accounts allowed to use their payer's managed services, each with its own budget. Everyone else in a managed payer is denied.

Accounts

Payers

Managed = the listed services are available only to allowed accounts. Open = no management at all. Hover a name for its notes.

Payers

Usage

Total AWS spend per payer, all services, by month (unblended, from Cost Explorer). The current month is month-to-date. Refreshed once a day.

Monthly usage by payer

Idle accounts

Payer	Account	Name	Type	Last month with spend	Last 12 months

Abnormal cost

Every payer, every account. Live Bedrock spikes from the engine (5 min); all-service spikes, new services and payer month-to-date from Cost Explorer (6 h); organization joins/leaves (5 min); AWS Cost Anomaly Detection (daily).

–

Bedrock accounts spiking right now

–

all-service spikes / new services yesterday

–

payers running above last month

–

accounts joined / left, last 7 days

–

non-allowed accounts spending (last 2 days)

–

AWS anomalies ongoing (all services)

–

AWS anomaly impact, last 30 days

All-service spikes and new services

Payer	Account	Service	Kind	Yesterday	Avg / day (7d)	Ratio

Payer month-to-date

Payer	This month	Same days last month	Change

AWS Cost Anomaly Detection

Payer	Account	Service	Started	Ended	Expected	Actual	Impact	%

Bedrock spend spikes

Account	Today so far	Avg / day (7d)	Ratio	Status

Organization joins and leaves

When	Account	Payer	Event

Non-allowed Bedrock spend

Account	Payer	Last 2 days	This month	Last spend

Events

Blocks, releases, warnings, leaks and configuration changes — newest first.

Events

Settings

Your account, the look of the dashboard, and the engine controls.

My account

–

Appearance

Sidebar colour

Or pick any colourtext switches to light or dark automatically

Engine

Run engine now

Re-measure every allowed account and re-apply management policies. Runs by itself every 5 minutes.

Run leak scan

Cost Explorer sweep of every payer for Bedrock spend on accounts that are not allowed, plus AWS cost anomalies. Runs by itself every 6 hours.

Re-sync alert emails

Rebuild the SNS subscription filters from each account's email list. New recipients must confirm once by email.

Connection

API URL

API key (scripts only — not needed when signed in)

Your name (recorded on manual actions)

Stored in this browser only.

Users

Dashboard logins. Administrators can add users, reset passwords and grant the admin role; everyone else only sees the other pages.

Users

Username	Email	Role	Pages	Status	Created