Cost Optimization & Cleanup

Cost Awareness

IAM itself is free. There are no charges for creating users, groups, roles, or policies. The billable resources created in this lab are:

• EC2 t2.micro instance: Eligible for 750 hours/month under the AWS Free Tier for the first 12 months of a new account. Outside free tier, t2.micro in us-east-1 is approximately $0.0116/hour. A two-hour lab session costs less than $0.03.
• S3 storage: The first 5 GB of standard storage is free tier eligible. Test files for this lab are negligible in size. Even outside free tier, a few kilobytes of test data costs a fraction of a cent.
• S3 requests: PUT and GET requests are billed per 1,000 requests ($0.005 per 1,000 PUT, $0.0004 per 1,000 GET in us-east-1). The number of requests in this lab is under 20 total.

Estimated total lab cost: $0.00 to $0.05 depending on free tier status and region.

The only resource that generates ongoing cost if left running is the EC2 instance. S3 buckets with no stored objects generate no cost, but buckets with objects do accrue minimal storage charges.

Teardown Instructions

Complete the following in order:

1. Terminate the EC2 instance (Actions > Instance State > Terminate). Verify the instance state changes to terminated.
2. Delete all objects from both S3 buckets, then delete the buckets themselves.
3. In IAM: remove audit-user-01 from document-auditors, then delete the user.
4. Delete the document-auditors group.
5. Detach and delete the DocumentAuditorS3ReadOnly policy.
6. Detach and delete the DocumentProcessorS3Access policy.
7. Delete the EC2DocumentProcessorRole role.

There are no other billable resources created in this lab (no VPCs with NAT Gateways, no load balancers, no RDS instances).

Cleanup confirmed:

0 of 9 completed

EC2 instance terminated and shows terminated stateAll objects deleted from both S3 bucketsBoth S3 buckets deletedaudit-user-01 deleteddocument-auditors group deletedDocumentAuditorS3ReadOnly policy deletedDocumentProcessorS3Access policy deletedEC2DocumentProcessorRole deletedNo remaining IAM entities from this lab exist in the account