Demonstration Dashboard.
Live data from the real AWS account behind dynamiccloud.info, organised around the five principles every cloud well-architected framework names — plus a Discovery section that renders every running service in parallel as a load-speed reference. Every pane on every tab refreshes from a real API on every visit.
Every running service, loaded in parallel.
A LightPane service-discovery panel for every supported service across three cloud accounts — AWS (eu-west-2), Azure (ukwest), and GCP (europe-west2). 85 panes load concurrently from LightPane's platform-side cache of cloud state — sub-second responses for every viewer, no throttling of the upstream provider APIs no matter how many people open the page. The cache absorbs the read load so the AWS / Azure / GCP control planes only see LightPane's own polled refreshes. Each provider is rendered against its own origin-locked demo access key.
Region Footprint.
Where everything actually lives. Click a region pin to filter the table; click a service chip above the map to highlight just that service across regions. The same pane embeds in your own runbooks or status pages — drop a div, pass a key.
Global Resource Search.
One search box, every service, every region. By name, ID, or tag value. The AWS console technically has a Resource Explorer; ours is faster and works on resources the console won't index.
S3 Bucket Overview.
Every bucket on the account at a glance: region, encryption, versioning, public-access-block status, lifecycle + replication flags. Live from the S3 API. The deeper "open this bucket and browse the prefix tree" view is shipping in a later phase once the backend list-objects action is wired.
Daily Briefing.
A single prioritised list answering "where do I start today?" Aggregates findings from CloudWatch alarms, IAM posture, free-tier headroom, recent IAM activity, and cost opportunities — each row links to the pane that owns the detail. Particularly useful for new AWS users who land on a static empty dashboard otherwise.
Service Quota Radar.
AWS service quotas across the account, sorted by how close each one is to the limit. The most useful column isn't "limit" — it's "you'll hit this in N days at current rate". Catches the quota that fails your next launch a week before it fails it.
Event Timeline.
A multi-track timeline that stitches together CloudWatch alarms, mutating CloudTrail events, GuardDuty findings, deploys, and Auto Scaling activity in a single view. As much for product launches and planned changes as for incidents — anything that mattered on this account. Live data from the demo account; the most recent change you'll see is whatever the Phase A→D analytics workload last published.
AWS Health Reports.
Two streams in one view: paid AWS Health API events targeted at this account (planned maintenance, abuse reports, scheduled changes) and the public Service Health Dashboard RSS feed (regional outages, service degradations). When something AWS-side goes wrong, this is where the early signal shows.
CloudFormation Drift.
All CloudFormation stacks on the account, with drift status. Drift = something changed outside of code, and is the single most common cause of "the redeploy broke production after weeks of working fine". Every drifted resource is a future surprise.
Change Feed.
The recent stream of resource changes across the estate — who changed what, when. Azure reads it from the Activity Log; GCP from Cloud Audit Logs. The same signal feeds LightPane's event-driven cache, so a pane is never more than a change behind. AWS has no single equivalent feed, so this page is Azure + GCP only.
Security Findings.
The consolidated finding feed Security Hub aggregates across GuardDuty, Inspector, Macie, IAM Access Analyzer and Config — prioritised by severity, filterable by source product. One place to see "what's wrong on this account" without opening six different consoles.
Security Compliance.
Security Hub CSPM control compliance against AWS Foundational Security Best Practices (and any other enabled standard), per region. The pass / fail score mirrors the AWS console's Security Score — the failing controls are what to fix.
IAM Access Keys.
Per-user access-key age heatmap. Old keys aren't necessarily bad — but the ones nobody owns or remembers are. Highlights keys that haven't rotated in 90+ days and shows last-used time so you can tell live from abandoned at a glance.
Public Exposure Audit.
Resources reachable from the public internet, classified by intent. CloudFront distributions and the API Gateway are intentionally public; an open security group with SSH on 0.0.0.0/0 isn't. Spots the second category from the first by cross-referencing tags, ownership, and common-mistake patterns.
Access Analyzer.
AWS IAM Access Analyzer findings: which roles, S3 buckets, KMS keys, Lambda layers, and Secrets Manager secrets are accessible from outside this account. The report you're expected to read at audit time, surfaced continuously instead of once a quarter.
CloudFront.
Every distribution on the account with cache-hit ratio, request rate, and origin-latency sparklines. The "did the last deploy quietly break asset delivery" view — without waiting for a customer-support ticket to find out.
DynamoDB Tables.
Tables across the account with read/write capacity, throttle counts, item counts, and Global-Tables replica state. Catches the hot table approaching its provisioned ceiling before requests start failing.
Lambda Radar.
Every function with invocation, error, and cold-start sparklines. The "this function used to be 80ms and now averages 600ms" view — surfacing performance regressions that don't trip an alarm but matter to user experience.
Right-Sizing Recommendations (Cost Explorer).
AWS Cost Explorer's right-sizing suggestions, formatted as actions you can take. Each line shows the current instance, the recommended replacement, and the projected monthly saving — turning a recommendation report into a work queue. Cost-driven: answers "where am I overpaying?".
Compute Optimizer.
AWS Compute Optimizer recommendations across EC2 / EBS / Lambda / RDS / Auto Scaling — distinct from Cost Explorer's Rightsize: ML-driven on CloudWatch metrics rather than cost data, covers more resource types, and includes confidence scores + finding categories (over-provisioned vs under-provisioned). Answers "where am I under-utilising?".
Cost Summary.
Month-to-date spend versus budget, the top services driving it, and any cost-anomaly hits in the last 30 days. The single number on the bill, explained — not just reported.
Cost Forecast.
AWS Cost Explorer's end-of-month forecast with confidence band, overlaid with the trailing actual-spend curve. Spots the "we're going to overshoot the budget by 15%" weeks before the bill arrives.
Cost by Tag.
Spend grouped by any tag key on the account. "How much did the analytics workload cost last month?", "What does the auth team's environment actually consume?". Real attribution rather than service-level guesswork.
RDS / EKS Extended Support.
Database engines and Kubernetes versions that are now on AWS's paid Extended Support tier — typically 2–3× the base hourly rate. The "we forgot to upgrade and AWS started silently charging us a premium" check.
RI & Savings Plans.
Reserved Instance and Savings Plan utilisation + coverage. Underused commitments are wasted money; uncovered usage is missed savings. This pane shows both sides of the same trade.
Data Transfer.
Per-region, per-source-destination data-transfer cost breakdown. Cross-region traffic, internet egress, NAT gateway throughput — the line items that surprise teams when a usage pattern shifts by a few percent.
CloudFront Free Tier Monitor.
Tracks the two CloudFront free-tier limits — 1 TB of data
transfer and 10M HTTP/HTTPS requests per month — across
every distribution on the account. Per-distribution
breakdown plus a "days remaining at current burn rate"
projection. The standard AWS Free Tier API doesn't
include CloudFront metrics, so this pane reads
AWS/CloudFront CloudWatch metrics directly.
AWS Free Tier Monitor.
Selectable companion view for free-tier-curious accounts. Tracks consumption against AWS's always-free + 12-month allowances per service category. The demo account isn't a free-tier account so most gauges read zero — the pane's natural home is the dynamiccloud.info Free Tier guide page, not this dashboard.