
Secure Cross-Account AWS Cost Auditor
A multi-tenant cloud cost auditing tool built with Next.js, FastAPI, and Python that securely tracks AWS spend across customer accounts without handling long-lived credentials. The application provisions cross-account IAM access using one-click CloudFormation templates locked down by cryptographically unique External IDs to prevent the Confused Deputy vulnerability, dynamically fetches ephemeral session tokens via AWS STS AssumeRole, and queries the AWS Cost Explorer API under least-privilege permissions to deliver prioritized, real-time cost-driver breakdowns.






