Skip to main content

​
What is the Analyser?

The ZapStack Analyser is a Go-based scanning engine that connects to your AWS accounts and identifies optimization opportunities. It runs 50+ checks across multiple AWS services.

​
How It Works

┌─────────────────┐
│  ZapStack       │
│  Analyser       │
└────────┬────────┘
         │
         │ AssumeRole
         ▼
┌─────────────────┐
│  Your AWS       │
│  IAM Role       │
└────────┬────────┘
         │
         │ API Calls
         ▼
┌─────────────────────────────────────┐
│              AWS Services            │
├─────────┬─────────┬─────────┬───────┤
│   EC2   │   RDS   │   S3    │  ...  │
└─────────┴─────────┴─────────┴───────┘
  1. Authentication: Assumes the IAM role in your account using STS
  2. Discovery: Lists resources across enabled regions
  3. Analysis: Runs checks against discovered resources
  4. Metrics: Fetches CloudWatch data for utilization analysis
  5. Reporting: Generates findings with recommendations

​
Supported Services

ServiceChecks
EC2Idle instances, Graviton eligibility, Reserved Instance coverage
EBSUnattached volumes, GP2 to GP3 migration, old snapshots
RDSIdle databases, Reserved Instance opportunities
DynamoDBIdle tables, on-demand vs provisioned
LambdaUnused functions, memory right-sizing
S3Incomplete multipart uploads, intelligent tiering
ELBIdle load balancers, unused target groups
Elastic IPUnattached addresses
Security GroupsUnused groups

​
Multi-Region Scanning

The analyser scans all enabled regions in parallel by default. You can configure which regions to scan in your dashboard settings.

​
Scan Duration

Scan duration depends on:
  • Number of resources in your account
  • Number of regions being scanned
  • CloudWatch metric lookback period
Typical scans complete in 2-10 minutes.