Cost and Security Management extension

The extension pulls spend and efficiency data from your CloudBolt Cost and Security Management (CSMP) instance and displays it against your resource handlers, so you can see what a cloud account is costing without leaving CMP.

Prerequisites

• You need a CSMP domain (yourdomain.cloudbolt.app) and an API key.
• The resource handler must already be added to your CSMP instance as an adapter.

The extension reads AWS, Azure, and GCP resource handlers.

Setup overview

1. Download the extension and connect it to CSMP.
2. Open the extension to check which resource handlers have data.
3. Open a resource handler to view its Spend, Efficiency, and Compliance tabs.
4. Run the caching jobs so the dashboard widgets have data to display.

Set up the extension

1. In CSMP, collect your API key and note your domain. See Collecting an API Access Key.
2. In CMP, select Library and search for Cost and Security Management.
3. Select the download icon, then Import to confirm.
4. Restart the web server on each web node in the appliance: SSH in, switch to the root account with sudo su -, then run systemctl restart httpd.
5. Go to Admin > Cost and Security Management. The page opens on the Getting Started tab.
6. Under Integration Setting, enter your CSMP domain and API key.
7. Select Validate. If validation succeeds, select Save Credentials.

When a saved key expires, a warning appears above Integration Setting. Edit the section and enter a new key.

View spend, efficiency, and compliance

Saving the credentials adds the tabs below to every supported resource handler. To check which handlers CSMP has data for, go to Admin > Cost and Security Management and select the Resource Handlers tab.

Spend details

On a resource handler with cost data, select the Spend tab. The Overview tab shows the top-level breakdown. Use the tabs to the right of Overview to filter and customize what is displayed.

Efficiency details

On a resource handler with cost data, select the Efficiency tab to view details for Unused, Unoptimized, and Suppressed.

The Efficiency (Cost Service Adviser) Configuration section of the extension’s page determines what is displayed, such as how long a service must sit idle to be reported and whether snapshots whose volume or database no longer exists are included. Those settings are saved to your CSMP account.

Compliance details

On an AWS or Azure resource handler, select the Compliance tab to see how the account scores against CIS, PCI DSS, NIST, HIPAA, and AWS Well-Architected.

Server costs

Each AWS and Azure server has a Costs tab that shows that server’s cost summary and breakdown, along with the savings CSMP has identified. The Form Customization section on the extension’s page sets a link to the rightsizing documentation that appears on this tab.

Dashboard widgets

The extension adds five widgets to the CMP dashboard:

• Cloud Provider’s Spend Details: spend over the last 30 days, by resource handler, service, and region.
• Most Expensive Cloud Services: the five services costing the most.
• Cost in Cloud Providers: daily cost per provider, with each provider’s share of the total.
• Cost Efficiency in Cloud Providers: the savings available from unused, unoptimized, and suppressed services.
• Compliance Summary: the compliance score for each resource handler, by framework.

The widgets read cached data rather than calling CSMP directly, so a widget remains empty until its caching job runs. Two recurring jobs keep the cache up to date. Both are added as enabled and are set to run daily at 00:10.

• CSMP Dashboard Widget Data Caching stores the data behind the widgets.
• CSMP Resource Handler Data Caching stores each resource handler’s default currency.

Both jobs are listed in the Recurring Jobs section of the extension’s page and under Admin > Recurring Jobs, where you can run either on demand.

Widget currency

Cloud providers bill in different currencies, so the widgets need a configured currency. This preference is stored in CMP and applies only to widgets.

1. Under Dashboard Widget’s Currency, enable Currency Conversion Status.
2. Choose a Preferred Currency and select Save.
3. On the Resource Handlers tab, add a conversion rate from each handler’s Provider Currency to your target currency. Conversion rates are held in your CSMP account.
4. Run CSMP Dashboard Widget Data Caching so the widgets pick up the new rates.

Troubleshooting