Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
SoftwareOne's FinOps for Cloud helps businesses optimize cloud spending by providing real-time insights, budget tracking, and cost management. This solution enables teams to allocate resources efficiently, control expenses, and drive financial accountability across cloud environments.
FinOps integrates with public cloud providers, including Amazon Web Services, Microsoft Azure, and Google Cloud.
Built on the open-source OptScale platform from Hystax, the FinOps platform contains several features that enhance your cloud usage experience by providing detailed insights and management capabilities without actively interfering with your environment.
Here are some of the key features:
Cost explorer - Analyze your cloud spending with clarity. This feature includes tools that help you break down your cost structure, uncover trends, and identify opportunities to optimize spending across your organization.
Recommendations - Use recommendations to discover hidden inefficiencies in your cloud infrastructure. Our recommendations highlight overlooked configuration issues and security risks to help you optimize performance, reduce costs, and strengthen your cloud posture.
Budgeting tools - Set, track, and adjust cloud budgets with built-in forecasting tools. Stay ahead of unexpected costs and ensure every team stays aligned with financial goals throughout the cloud lifecycle.
Ownership and accountability - Empower teams to take ownership of their cloud spending. With clear cost allocation, usage breakdowns, and automated alerts, you can easily promote responsible consumption.
Analytics and Insights - Gain insights into your cloud usage and spending across different platforms. With up-to-date dashboards and analytics, you can quickly identify inefficiencies and take action before costs spiral out of control.
To learn more, see .
FinOps for Cloud is SoftwareOne's cloud financial management platform designed to help organizations gain visibility into and optimize their spending across platforms like Amazon Web Services, Microsoft Azure, and Google Cloud.
With FinOps for Cloud, you can explore and analyze your cloud expenses, monitor resource usage, and implement policies to ensure efficient and cost-effective cloud management. The platform's user-friendly interface and robust features empower organizations to achieve greater visibility and control over cloud infrastructure, enabling smarter decision-making and improved financial planning.
Overview
Discover key features of FinOps for Cloud.
Access Your Organization
Get started by signing in to your organization.
Navigate the User Interface
Become familiar with the user interface.
Add Data Sources
Add your AWS, Azure, or Google data sources.

The Add option on the Data sources page allows you to connect your data source to FinOps for Cloud. The supported data sources include Amazon Web Services, Google Cloud Platform, and Microsoft Azure.
Before adding a data source, you must complete certain prerequisites, depending on the type of data source you are adding. In addition, you might also need to complete certain tasks on the cloud provider's side and some in FinOps for Cloud.
To learn about all the prerequisites and onboarding steps for each of the supported data sources, see the following links:
To manage the settings of your connected data sources, see Manage Data Sources.
The Re-apply ruleset option initiates a new check of the already assigned resources against the current ruleset.
When selected, this option reorganizes the resources, even if they were previously assigned otherwise. This feature helps you manage assignments, especially when the rules are edited, new ones are added, or the priority of existing rules is changed.
To reapply a ruleset:
Navigate to the Pools page.
Select Configure assignment rules, then select Re-apply ruleset.
Choose whether to reapply the ruleset to the resources in the entire organization or a specific pool.
If you selected Specific pool
FinOps for Cloud is a SaaS product that is built on top of Optscale .
It enables you to optimize cloud spending by providing real-time insights, budget tracking, and cost management. You can also allocate resources, control expenses, and drive financial accountability across cloud environments.
See the following links to get started:
Once your organization is set up within FinOps for Cloud and a data source is connected, you can perform several tasks to optimize your cloud spending and manage overall costs.
Use the following reference to access the relevant documentation:
You can download a complete list of users in your organization as an Excel or a JSON file for offline analysis, reporting, or integration with external tools.
The downloaded file includes details for each user, such as user ID, first and last name, organization ID, last login, and more.
To download a list of users:
Navigate to the User management
Select Run to start the process.
Select Download.
Choose your desired format, XLSX or JSON, to start the download.
The Disconnect option on the details page of a data source lets you disconnect and remove a data source from FinOps for Cloud.
When a data source has been disconnected, you’ll only be charged for the days the data source was connected. Once it’s disconnected, billing will stop, and you won’t receive any further invoices.
Disconnecting a data source removes all historical data associated with that source.
To disconnect a data source from FinOps for Cloud:
In FinOps for Cloud, navigate to the Data sources page.
Select the data source you want to disconnect.
On the details page of the selected data source, select Disconnect.
Select Disconnect again to confirm the action.
Set quotas and budgets to manage your cloud spending effectively.
Allocate resources by name, ID, tags, data source, resource type, and region.
Create tagging polices to categorize your resources.
Identify anomalies in your spending.
View savings and security recommendations.
Use the resource details page to view detailed information about each resource.
You can check resource properties, review associated expenses, and see any pool constraints applied through resource policies. From the same page, you can also add an assignment rule if needed.
To view resource details and add an assignment rule:
From the sidebar, navigate to the Resources page.
(Optional) to display specific resources, or use search to find the required resource.
In the Resource column, select the link for the resource to view.
On the resource details page, use the Details, Constraints, and Expenses tabs to view the data.
To create a new assignment rule, select Add Assignment Rule. For more details, see .
The following are the available recommendation categories in FinOps for Cloud and their descriptions:
Savings - These recommendations help you save money and reduce costs.
Security - These recommendations help to improve the security of your connected data source.
Critical - These recommendations must be prioritized and addressed immediately to prevent potential disruptions or vulnerabilities.
Non-empty - These recommendations help ensure that all active resources are being utilized efficiently and are not incurring unnecessary costs.
See the following links for a list of savings and security recommendations:
When setting up your FinOps organization, it's important to consider the different roles you need for your account members.
The roles available within FinOps for Cloud include Organization Manager, Manager, Engineer, and Member. For a description of these roles, see . Once you have determined the appropriate roles for each individual you want to add to your account, open User management to start adding new users.
The Perspective feature on the Resources page allows you to create new perspectives.
A perspective is a customized view that you can create using only the filters you need. For example, you can save a view that shows only certain data sources, regions, or resource types. This ensures you can quickly return to your preferred view without reconfiguring the filters each time.
You can create multiple perspectives and save them for future use. When saving perspectives, make sure to use different names, as you cannot have two perspectives with the same name. If you use the same name for a new perspective, the platform overwrites the existing one.
You can also share the perspective URL with others in your organization, and delete a perspective if it's no longer needed.
Organization Managers can create new anomaly detection policies by defining the policy name and description, and the parameters under which anomalies will be identified.
FinOps for Cloud supports two types of anomaly detection policies, including Resource count and Expense. To learn about these policy types, see .
To create a new anomaly detection policy:
In FinOps for Cloud, the User management page shows a list of existing users in your organization and what role they have been assigned. Each page shows up to 50 users.
For each user, you can also view the following information:
The user's name and the unique ID assigned to them by FinOps for Cloud.
The last time the user accessed the organization.
The user's email address.
Quotas and budgets are two crucial concepts to consider when managing cloud storage. These tools help organizations control costs and manage resources efficiently.
Budgets refer to the financial limits an organization sets to manage the costs associated with cloud storage usage, and quotas limit the storage resources a user, application, or department can consume.
In FinOps for Cloud, quotas and budgets are used to create policies that ensure cost optimization and compliance with your budget constraints.
FinOps for Cloud supports three types of policies, including resource quota, recurring budget, and expiring budget. You can define the policy type along with thresholds and filters during policy creation.
The Recommendations page is designed to make you aware of the less apparent deficiencies of the infrastructure, like configuration flaws and security risks.
To receive recommendations, it's essential to to FinOps for Cloud. When a data source is added, FinOps for Cloud analyzes it to provide recommendations to help you optimize costs and improve resource security, performance, and availability.
Currently, FinOps for Cloud performs a check every 3 hours.
The Recommendations page displays a summary of each recommendation and suggests actions to help you make informed decisions. The summary varies, depending on the condition. For instance, it might show AWS S3 duplicates found during the last check, checks that did not start or finish successfully, and so on.
Recommendations also contain one of the following symbols:
To address the ever-dynamic cloud infrastructure where resources are being created and deleted continuously, FinOps for Cloud contains a set of tools to help limit the related expenses and the lifetime of individual assets.
This is implemented in the form of constraints that you can set for a specific resource or generally for a pool. You can set two types of constraints:
TTL - Represents time to live. A resource must not live for more than the specified period.
For a resource, specify a date and time.
The Resources page provides a detailed overview of all available cloud resources, detailing their usage and associated costs. You can use this page to efficiently monitor and manage your cloud resources.
The page displays data in graphical format and in a table. The graphic visualization includes various types of charts, such as bar charts and line graphs, helping you understand trends, patterns, and anomalies in your cloud resource usage and expenses. The tabular data includes specific data points and metrics, including columns for different parameters, such as resource type, cost, usage, tags, owner, and more.
By default, the Resources page displays details about all cloud resources, including total expenses and the resource count. You can narrow down the data using customization features such as date range and filters.
The User management page in FinOps for Cloud displays a list of existing members within your organization. For each member, you can view details, such as their name, unique ID, last login time, email address, and assigned roles.
From this page, Organization Managers can also invite new members or remove existing members from the organization.
In FinOps for Cloud, roles can be assigned when .
By default, the Member role is assigned to allow the individual to have read-only access. You can select other roles and assign them at the pool level. When assigning roles, we recommend assigning the Organization Manager role only to those individuals who need the highest level of access and permission to perform actions without any restrictions.
To start monitoring your cloud resources, you must connect your billing source to FinOps for Cloud. The supported data sources include Amazon Web Services, Google Cloud Platform, and Microsoft Azure.
The onboarding process in FinOps requires you to meet certain prerequisites based on the data source you want to add. These prerequisites can differ depending on the source.
Additionally, you might need to complete certain tasks on the cloud provider's side and some in FinOps for Cloud. For instance, if you are connecting an AWS source, you must create Cost and Usage Reports, configure policies in the AWS console, and then add your AWS account to FinOps.
If you no longer need a pool, you can delete it. However, a pool can only be deleted if it doesn't contain any sub-pools. If the pool you want to delete contains subpools, you must first delete all subpools.
Note that to delete a pool, you must have the Manager role in the parent of the pool you want to delete.
The Pools page in FinOps for Cloud allows you to view and manage your organization’s resource pools, including their limits, expenses, and forecasts. You can also monitor resource usage, identify potential overspending, and optimize costs by visualizing current expenses and forecast.
All pools and sub-pools are organized in a hierarchical structure to help you navigate and manage them easily. The Expenses and Forecast columns provide insights into your current expenses and projected costs for each pool and sub-pool.
You can also see the pool owner and perform actions, like adding new subpools, viewing the resource list, opening the pool in the cost explorer, and deleting the pool and its subpools.
You can create a new Cost and Usage Report (CUR) from the AWS console. For details, see in the AWS Data Exports User Guide.
When creating the report, use the following settings:
Under Export details, choose Standard data export.
For Export name, enter billing-{your AWS account number}. Replace {your AWS account number} with a valid AWS account ID.
The Cost explorer feature contains tools and options to help you analyze costs and understand the cost structure for your organization.
Using this feature, you can view your total expenses for the selected period and compare them with the total expenses from the previous period. You can also view a chart of your expense data to understand your overall spending and identify any trends or changes in your spending patterns.
The Cost Explorer contains the following options to display a breakdown of your expenses:
Time interval - Use this to change the time interval on the graph. You can change the time interval to Daily, Weekly, or Monthly. This allows for a more detailed or broader view of cost trends over different periods.
You can view the assignment rules associated with a selected pool from the Assignment rules tab on the pool's details page.
This view provides insight into how resources are assigned and managed within the pool, ensuring transparency and making it easier to verify or update rules by centralizing them in one place.
Each rule displays key information, including its Name, Owner, and Conditions. The Conditions column offers a detailed summary of the criteria defined for each rule, such as Name/ID contains, Tag is, or Source is.
The Settings page in FinOps for Cloud lets you view and manage your organization settings, account invitations, and email notifications.
Organization - From this tab, you can retrieve and copy your organization ID and edit your organization name. You can also view the organization's currency. Note that you can connect only those data sources that match the organization's currency. This setting cannot be changed if at least one data source is already connected.
Invitations - If you have any pending invitations to join an organization on the FinOps platform, those invitations are displayed on this tab. Use this tab to manage those pending invitations.
The Export chart option on the policy details page allows you to download the chart as a PNG file.
By default, the chart displays data categorized by service along with daily expenses. You can modify these settings using the Categorize by and Expenses options. Additionally, you can hover over the chart to view detailed information.
To export the chart as a PNG file:
The cost map enables you to visualize your cloud expenses by region/location and service, so you can detect areas with high spending across cloud providers.
A cost map can also be used to view data transfer and connectivity costs.
To view the cost map:
From the left sidebar, navigate to the Cost map page.
Organization Managers can invite a new user to the FinOps organization by selecting Invite on the Users management page. To learn more, see Invite Users to Your Organization.
Organization Managers can remove an individual from an organization. To remove an individual:
Navigate to the User management page.
From the list of users, find the individual you want to remove.
In the Actions column, select the delete icon.
In the Delete user panel, select the organization manager who will take over all the assets of the individual you want to remove. This step is mandatory.
Select Delete to confirm the action.
(Optional) Adjust the date range filter to view the data for a specific time period.
Use the Region cost map as follows to visualize your spending geographically across cloud deployments:
Hover over a circle to see detailed expense information. Use the Show resources link to open the Resources page, which displays all corresponding resources.
Toggle between the full-screen and regular window mode.
Use the Summary by region table to view details, such as expenses for your specified time period, the percentage of total expenses, and related cloud resources.
Select the Network traffic cost map to analyze costs associated with data transfer and connectivity.
To invite new members to your organization:
Navigate to the User management page.
Select Invite.
On the Invite users page, complete the following steps:
Email - Enter the email addresses of the members you want to invite. You can enter multiple addresses.
Add role - Select Add role to choose a role. You must also select a pool for each member. All pools and sub-pools existing within your environment are displayed. Note that a member with Manager and Engineer roles can belong to several different pools.
Select Invite.
A confirmation message is displayed stating that the user has been invited, and an invitation email is sent to the individual.
Organization Manager
This role has the highest level of access and control. It can perform all actions, including inviting new users, changing roles, creating pools and sub-pools, and managing policies such as anomaly detection, quotas, budgets, and tagging.
Organization managers can also add new data sources and manage all resources within the organization.
Manager
This role is assigned at the Pool level and can create sub-pools within that pool.
Managers can manage resources within their assigned pools, ensuring they are utilized efficiently. The access is limited to the Pool level, and they don't have the same level of control as the Organization Manager. Other functionalities are available in read-only mode.
Engineer
This role is assigned at the resource level and has read-only access to the other functionalities.
Engineers can manage their resources, ensuring they are used efficiently and effectively. However, they can't create new pools or sub-pools.
Member
Members have read-only access to all features.
They can view the information and stay updated through notifications, but they can't make any changes or manage resources.
The Date range filter allows you to select a custom date range for your data. This provides flexibility in analyzing cloud resource usage and expenses over different periods.
The Filters section contains various options to include or exclude specific data. This includes filtering by resource type, owner, expense type, tags, and more. Each filter has its own suboptions you can select and apply. Additionally, you can combine multiple filters to further refine your analysis.
When you apply the filter options, the corresponding data updates automatically based on your selections. You can view the data as a chart or within the resources table.
To download the chart as a PNG image file, select Export data.
On the Resources page, you can do the following:
Save, apply, and manage your existing perspectives. A perspective is a customized view containing filters and settings you have specified. For more details, see Manage Perspectives.
Download a list of resources in the Excel or JSON format. For more details, see Download Resources.
View the full details of a resource and apply constraints to a specific resource using the resource details page. For more details, see View Resource Details and Apply Constraints.

Date range - Use this to adjust the date range. The date range selector offers flexibility in analyzing costs over different time frames.
See expenses breakdown by - Allows you to explore and analyze the expense breakdown by Source, Pool, or Owner. When you select any of these options, a detailed pie chart and data summary are displayed.
You can also download your Cost Explorer views as a PDF file using the Download option on the page.

Email notifications - Use this tab to configure email alerts. For details, see Manage Email Notifications.

Navigate to the Anomaly detection page.
Select the desired policy.
On the policy details page, do the following:
Select the required category. By default, the Service category is selected.
Choose whether you want the chart to display daily, weekly, or monthly expenses. By default, the Daily option is selected.
Use the slider to show or hide legends on the chart.
Select Export chart to download the chart to your system.

A violation history is available for those policies where the resource count or the expenses have exceeded the quota or budget.
Violated policies are displayed in red on the Quotas and budgets page.
To view the policy violation history:
Navigate to the Quotas and budgets page.
In the list of policies, find the policy for which you want to view the violation history.
Select the policy name.
On the policy details page, use the Policy Violations History section to view details including:
The date and time when the policy violation occurred.
The budgeted expense value vs the actual expense.
The resources linked to the quota or budget.
The Rename option on the details page of a data source allows you to update the name displayed for that source.
To rename a data source:
In FinOps for Cloud, navigate to the Data sources page.
Select the data source you want to rename.
On the details page of the selected data source, select Rename.
Enter the new name, then select Save.
The updated name is now displayed in FinOps for Cloud. Note that the previous data source name might still appear in historical data.
Assignment rules are evaluated according to priority. You can manually reapply these rules across the entire organization or within a specific pool. Additionally, you can manage assignment rules by editing them or adjusting their priority.
To learn more, see the following links:
To save a custom perspective:
From the sidebar, navigate to the Resources page.
Select Save perspective.
Under Save as, enter a name for your custom perspective, then select Save. The configuration is saved as a perspective.
Saved perspectives are displayed when you select Perspective on the Resources page. The option is enabled only if you have previously saved at least one perspective.
To apply a saved perspective:
On the Resources page, select Perspectives.
Choose the perspective you want to view and select Apply.
When the perspective is applied, the Resources page updates its title to include the name of the perspective. Additionally, a link to copy the URL appears beside the name, allowing you to share the perspective with others.
You can delete perspectives that are no longer needed.
To delete a perspective:
On the Resources page, select Perspectives.
Select the See all Perspectives link.
From the available perspectives, find the one you want to delete. Then, under Actions, select the delete icon.
In the Delete perspective panel, select Delete again to confirm the action.
Navigate to the Anomaly detection page, then select Add. The Create anomaly detection policy page opens.
Enter a descriptive name for the policy and select the policy type:
Select Resource count if you want the daily resource count to not exceed the average amount over the last evaluation period, according to the threshold percentage.
Select Expense if you want FinOps for Cloud to detect when everyday expenses exceed the average sum for the last evaluation period above the threshold percentage.
Enter the evaluation period in days and define the threshold percentage.
(Optional) Select any filters to be used to trigger policy alerts. You can apply multiple filters. If applicable, select Show more to view all filter options.
Select Save to finish creating the new policy.
Once the policy has been created, FinOps for Cloud sends an email notification to the Organization Manager every time an anomaly is detected.
From the Quotas and budgets page, you can create a new policy and view your existing quotas or budgets. You can also do the following:
Select a policy to view detailed policy information, including violations if applicable.
View the timestamp of the last check.
See the current resource count or expense value in the Status column. Use the progress bar to understand how close the current value is to the set threshold. The color of the progress bar reflects the ratio of the current value to the quota or budget.
Red - Indicates that the resource count or expenses exceed the quota or budget.
Yellow - Indicates that the resource count or expenses are approaching the threshold, specifically in the range of 90% and 100%.
Green - Indicates that the values are within the limit and don't exceed the quota or budget.
View all filters that display the criteria used to select resources for the quota or budget.
View resources connected to a quota or budget by selecting the Show resources icon in the Actions column.
A green symbol indicates that there are no recommendations or your potential savings are zero.
An orange symbol appears when certain items require attention, for instance, if there are inactive IAM users in your organization.
On the Recommendations page, you can do the following:
See your possible monthly savings that can be achieved if the recommended suggestions are implemented.
See the last check time. This is the time when FinOps for Cloud last checked for an update.
See the next check time. This is the time when the next recommendation check is due.
Filter recommendations based on data source, category (Savings, Security, Critical, and Non-empty), and applicable services.
Customize the parameters for a recommendation, exclude pools, and pin or unpin recommendations. For more information, see .
Use the Force check option to run the data sources' evaluation sequence and initialize a force check. Only can initialize a force check.

For a pool, input an integer between 1 and 720 hours.
Daily expenses limit - The resource spending must not exceed the specified amount in dollars. Input as an integer, min $ 1, 0 - unlimited.
When FinOps discovers active resources in the connected source, it checks that they don't violate any existing pool constraints that were applied as policies before.
When a resource hits a constraint, both the Manager and Owner of the resource are alerted through email. If a resource is unassigned, alerts are sent to the organization managers. An exclamation mark also appears next to the pool name on the Pools page.
To apply constraints to a resource:
On the Resources page, select the required resource.
On the resource details page, select the Constraints tab.
Use the slider to enable the required setting. Then, select edit to enter the value. When done, select to save your changes.
Create a new CUR 2.0 report
In the AWS Console, create an export of CUR 2.0 with its new schema.
See Creating reports in the AWS Data Exports User Guide for the necessary steps.
When creating the report, use the recommended settings in Create Cost and Usage Reports.
Update your existing data source in FinOps for Cloud
When the report is ready, use the following steps to update your existing AWS data source in FinOps for Cloud:
Select the existing AWS data source on the Data sources page in FinOps for Cloud. The page with detailed information opens.
Select Update credentials to update the data source's credentials.
In Update AWS cloud credentials, do the following:
Enable Update data export parameters to update the billing bucket information.
Before adding a data source, make sure to go through the following links to understand the prerequisites and onboarding steps for supported data sources:
Then, follow the steps in this section to add your data source to FinOps for Cloud.
To add a new data source:
From the left sidebar, select Data sources.
On the Data sources page, select Add.
On the Connect data source page, do the following:
Select the data source you want to add, for example, AWS, Azure, or GCP.
Select the connection type:
AWS - Choose if you want to connect a root account or a linked account.
Azure - Choose if you want to connect a tenant or a subscription.
GCP - Choose if you want to connect a tenant or a project.
Enter the account credentials. The fields and options vary depending on the source you are connecting.
Select Connect.
When the data source is connected, the details and cloud expenses of the connected cloud account are displayed on the page.
To view the resource details, select the resource name. You can then see all the properties and manage the data source, including renaming, updating credentials, and disconnecting.
To delete a pool:
Navigate to the Pools page.
In the Actions column, select the delete icon .
In the confirmation dialog, select I understand and want to delete this pool.
Select Delete to confirm.
When the pool is deleted, all resources from that pool are reassigned to its parent pool. Any rules that previously referenced the deleted pool are automatically redirected to the root pool.
Under Data table content settings, select CUR 2.0.
For Additional export content, select Include resource IDs. Leave the Split cost allocation data checkbox clear.
For Time granularity, choose Hourly.
Under Data export delivery options, do the following:
For Compression type and file format, select Parquet - Parquet.
For File versioning, select Overwrite existing data export file.
Under Data export storage settings, enter the S3 bucket name as billing-export-{your AWS account number}. Replace {your AWS account number} with a valid AWS account ID.
For the S3 path prefix, enter reports as your prefix.
The following image displays the recommended CUR settings:
To view the assignment rules for a pool:
Navigate to the Pools page.
Select the desired pool group or subpool.
Select the Assignment rules tab. All assignment rules that have the given pool as a target are displayed.
(Optional) Select See all assignment rules to navigate to the main assignment rules listing page, where you can manage all rules across different pools.
If you want to implement policies for an entire pool, instead of a single resource, you can do so from the Constraints option within the pool's details page.
Only individuals with a Manager role can enforce shared constraints across the pool. While shared constraints apply pool-wide, custom resource-specific constraints can still be configured and will override the general policy.
To configure pool constraint policies:
Navigate to the Pools page.
Select the desired pool group or subpool.
Go to the Constrains tab and select the edit icon.
Enter values in the TTL (Time-to-live) or Daily expense limit fields.
Select to save your changes. The constraint will apply to the resources within the selected pool or subpool.
The more optionin a recommendation card contains features that you can use to adjust parameters and exclude pools.
These features allow you to fine-tune and optimize results to better meet specific goals or conditions. The available parameters and pools you can exclude from a recommendation vary based on the recommendation you are accessing.
To customize a recommendation:
Navigate to the Recommendations page.
Find the required recommendation, then select the more icon.
To update the recommendation parameters, select Settings and make the required changes. When saved, new settings are applied during the next recommendations check.
To exclude a pool from a specific recommendation, select Exclude pools. When excluded, the excluded objects are displayed on the Excluded tab within the Recommendations page.
To pin or unpin a recommendation, select Pin or unpin, depending on the available option. Pinned recommendations always appear as the first one in your list of recommendations until they are unpinned.
To use FinOps for Cloud, you need an account. This account is different from your Marketplace Platform account.
When you order a FinOps for Cloud subscription from the SoftwareOne Marketplace, we will process your order and create an organization for you. This organization represents your account.
FinOps for Cloud provides different experiences for first-time access, depending on whether you are an organization administrator or user.
Once we process your order, the organization administrator will receive a password recovery email containing a verification code. This email will be sent to the address specified during the ordering process.
To set up a new password and sign in, the organization administrator must follow these steps:
Open the password recovery email from SoftwareOne FinOps for Cloud.
Select Recover password.
Enter the verification code from the email and select Confirm.
Enter your new password and confirm it matches the one you just entered. Then, select Reset password.
Select Proceed to FinOps for Cloud to sign in to your organization.
After signing in, you must connect your data source to FinOps. For more information, see .
If you've been added to an organization, you'll receive an invitation email from SoftwareOne FinOps for Cloud.
To join your organization:
Select the invite link in your email. The registration page opens.
Enter your full name and password.
Confirm that your new password matches the one you entered in the Password field, then select Register. You'll receive a verification code by email.
Enter the verification code to verify your email and select Confirm. You'll be directed to FinOps for Cloud.
Select Accept to join your organization and start using FinOps for Cloud.
This page includes the latest enhancements, fixes, and new features in SoftwareOne’s FinOps for Cloud.
You can now download insights directly from recommendation tiles, making it easier to export and share optimization suggestions.
Removed all usages of the deprecated ADAL authentication library and upgraded all Microsoft authentication to MSAL. This is Microsoft's recommended library for all new development. Read about this more at .
Minor improvements to AWS Assumed Role data source for better reliability.
Various stability, reliability, and performance improvements.
Cost map is a new feature that offers a visual and interactive representation of your cloud spend across regions and cloud providers. The Cost map page includes two tabs:
Region - This tab allows you to visualize your spending geographically across cloud deployments.
Network traffic - This tab allows you to analyze costs associated with data transfer and connectivity.
Additionally, the Cost Explorer view now includes a new breakdown option called Geography, allowing you to analyze expenses by region.
A new download option has been introduced to facilitate offline analysis, reporting, and integration with external tools. You can now download data from the following modules in FinOps for Cloud:
Resources - Download your resource data as an Excel spreadsheet or JSON file. You can also download Charts as PNG files.
Cost explorer - Download the data as a PDF.
User management - Export your list of users as an Excel spreadsheet or JSON file.
New filtering options are added to the page to help you narrow down and analyze cloud assets more effectively. You can now filter resources by:
Multi-select fields - This allows you to select multiple values across key dimensions for more flexible filtering.
First seen date - This allows you to identify newly discovered resources.
Last seen date - This allows you to track resources that might have been removed or are inactive.
We have enhanced the formatting of monetary values in all email communications.
Currency values are now presented consistently for better readability and a reduced risk of misinterpretation, especially in automated alerts and summaries.
SoftwareOne's is a new solution designed to help you optimize costs and manage your resources effectively.
With FinOps for Cloud, you can explore and analyze your cloud expenses, monitor resource usage, and implement policies to ensure efficient and cost-effective cloud management. With a user-friendly interface and robust features, the solution provides greater visibility and control over cloud infrastructure. Use the left sidebar to learn more about these features in detail.
The script deletes all recommended resources (based on the downloadable JSON file) and ignores errors. After completion, a summary lists deleted resources, non-existent or already deleted resources, and resources that couldn't be deleted due to other reasons.
jq - The package allows executing JSON scripts with bash. See .
Install the requirements on a machine running Linux OS.
Configure the AWS Command Line Interface. (Run the aws configure command. For information, see the ).
Download the script from the corresponding subsection on the Recommendations page.
From the same page, download the JSON file containing a list of all resources recommended for deletion.
jq - The package allows executing JSON scripts with bash. See .
Install the requirements on a machine running Linux OS.
Sign in with the Azure CLI.
Download the script from the corresponding subsection of the Recommendations page.
From the same page, download the JSON file containing a list of all resources that are recommended for deletion.
Open .
Download the script and the JSON file from the corresponding subsection of the Recommendations page.
Copy these files using the Upload/Download files button. The files will be placed in /usr/csuser/clouddrive.
Run the script as follows: bash <script_name> <path to json file>
jq - The package allows executing JSON scripts with bash. See .
Install on a machine running Linux OS.
Configure gcloud: run gcloud init. See for more information.
Run script bash <script_name> <path to recommendation json file>.
Organization Managers create new tagging policies by using the Add option on the Tagging policies page. Multiple policies can be created; for instance, you can create one policy that applies to all resources and another policy that applies to specific resource types.
After entering the policy details and filters, you can save the policy to begin monitoring. This ensures that the policy is applied to relevant resources and helps ensure compliance with the organization's tagging standards.
To create a new tagging policy:
Navigate to the Tagging policies page, then select Add.
On the Create tagging policy page, enter a name for the policy and select the date and time when the policy must start.
Choose whether the policy requires certain tags, prohibits certain tags, or defines a correlation between tags.
Enter the values in the additional fields according to your selected tagging rule.
If you selected the Required tag option, specify tags that must be present.
If you selected the Prohibited tag
Once the policy has been created, FinOps for Cloud sends an email notification to the Organization Manager when the policy is violated.
Organization Managers can create a new quota or budget policy using the Add option on the Quota and budgets page.
To create a new policy:
Navigate to the Quota and Budgets page, then select Add.
On the Create quota or budget policy page, provide a descriptive name for the new policy and select the policy type. The following options are available:
Resource quota - Triggers once per day if the current number of resources exceeds the limit.
Recurring budget - Triggers once per month if the expenses for the current month exceed the limit.
Expiring budget - Triggers when the total expenses from the start date exceed the limit.
Enter the values in the additional fields according to your selected policy type.
For a resource quota policy, enter the maximum number of resources.
For a recurring budget policy, enter the monthly budget value.
For an expiring budget policy, enter the total budget and the start date.
When the policy has been created, use the Status column on the Quota and Budgets page to view the current resource count or expense value. If the value exceeds the quota or budget, the progress bar turns red. Otherwise, it remains green. The progress bar also indicates how close the current value is to the set threshold values.
Tagging Policies are a type of policy that can help ensure that your resources are properly categorized and monitored.
Tagging policies use custom tags, which are descriptive labels assigned to resources. These tags help identify resources among others, making it easier for you to locate and manage them.
In FinOps for Cloud, Organization Managers can create new tagging policies using the Add option on the Tagging policies page.
When creating a new policy, you can specify the tagging rules applicable to resources when they are tagged. If the policy is violated, FinOps for Cloud sends an email notification to the Organization Manager.
From the Tagging Policies page, you can create new policies and monitor your existing tagging policies. You can also do the following:
View the timestamp of the last policy check.
Review the status of the policy, including any violations, to determine resources that are not complying with the tagging policy.
A red icon indicates that resources violating the tagging rules have been identified.
A green icon shows that all resources covered by the policy currently meet its tagging rules.
Cost map is an easy-to-use visualization tool that provides an overview of your organization’s cloud expenses. It enables you to view a breakdown of expenses by location/region and service to identify areas of high spending and understand usage patterns.
Cost map supports all Microsoft Azure, AWS cloud, and GCP regions. You can use the cost map to visualize regional cloud spend and network traffic at a glance.
The Region cost map allows you to view your total expenses for both the current and previous periods. You can also visualize your spending geographically across cloud providers and regions.
The Network traffic cost map allows you to visualize data transfer and connectivity costs. You can view accumulated expenses for paid network traffic between regions or services.
Both cost maps contain a date range filter, allowing you to select a custom date range or choose from predefined time range options to view the expenses you are interested in.
The Region cost map contains various visual elements to help you differentiate cloud providers and expenses.
The map uses color coding to differentiate between cloud providers. Refer to the legend above the map to interpret colors.
Each circle on the map represents the total cost for a specific region. If no spending is detected during the selected period, the circle shows a value of zero.
The size of the circle indicates the level of expense; for example, larger circles indicate higher costs.
Round circles represent the combined costs across multiple cloud providers. For example, the circle over Ireland in the above image represents the total spending for both Azure and AWS (for example,
The Summary by region table on the page lists expenses for each region along with the percentage of total expenses. You can sort the data by selecting the corresponding column header, and view the resources associated with a specific region by selecting the show resources icon in the Actions column.
The Network traffic cost map is a visual representation of the expenses associated with data transfer between regions. You can use this map to identify geographic locations where transfer costs are high and take steps to minimize those costs.
The cost map contains tabs, each representing a different cloud provider. You can switch between these tabs to view the corresponding network traffic details.
The network traffic is displayed on the map and in the Network traffic expenses table. When you select a link on the map, the table is filtered to display only the relevant data. Similarly, if you select the text in the From / To column, the map updates to show the network traffic expenses originating from that specific source only.
In FinOps for Cloud, you can customize your email notification settings to determine which notifications you want to receive to stay informed about important updates.
The notifications are organized into various categories, including:
FinOps - This includes weekly expense reports, pool limit alerts, and notifications for new saving opportunities.
Policy alerts - This includes all policy-related alerts.
Recommendations - This includes all savings and security recommendations.
System notifications - This includes system status or operational messages.
Account management - This includes notifications related to account invitations.
To manage your email notifications:
Navigate to the Settings page, then select the Email notifications tab.
Select the arrow next to each category to expand it and view the individual notification types. A list of alerts appears, along with toggle switches to enable or disable them.
Use the toggle button to manage your preferences:
Purple (On) - You will receive email notifications.
At the top of each category, a label shows how many alerts are active out of the total available (for example, Active: 4/4).
Anomaly detection is an integral part of a cloud security and management strategy.
It helps maintain the integrity and performance of cloud services while identifying and addressing potential issues before they cause significant damage or disruption. An anomaly is defined as a deviation from the normal pattern of cost or usage for a specific resource or group of resources.
Anomaly detection in FinOps for Cloud helps you identify unusual behavior that may indicate a security breach, system malfunction, or other operational challenges.
You can create new anomaly detection policies and manage them from the Anomaly detection page.
FinOps for Cloud supports two types of anomaly detection policies, including resource count and cost:
Resource count - These anomalies refer to inconsistencies or unexpected variances in the number of resources being utilized or allocated compared to what is expected or provisioned. Resource count anomalies can occur in various cloud resources, such as virtual machines, storage, network bandwidth, or cloud services, like databases and application servers.
Expense - These anomalies refer to instances where the actual financial expenditure on cloud resources deviates significantly from expected or budgeted costs. Expense anomalies can represent underlying issues, such as inefficient resource utilization, misconfigurations, unauthorized access, or even billing errors from cloud service providers.
When creating policies, you can also define the evaluation period, thresholds, and filters.
From the Anomaly detection page, you can create new policies and view existing policies. You can also do the following:
Select a policy to view detailed policy information, including violations if applicable.
Search for a specific policy by its name or description.
Track the dynamics in the Status column and hover over it to see both the average and current values.
Check the instances where the policy is applicable. An en dash (–) in the Filters column means the policy applies to all cases.
There are two ways to configure assignment rules in FinOps for Cloud. You can add them from the Pools or Resources pages.
When a new rule is added, it's always prioritized across the organization. It means that any discovered resources are first checked against the conditions of this new rule. If the resource doesn't meet the new rule's conditions, it's checked against the remaining rules in descending order until a matching rule is found.
To configure a new assignment rule:
FinOps for Cloud supports three major cloud service providers, including Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure.
To use FinOps, you only need to provide read-only access to your connected cloud account. This allows FinOps to view and retrieve data without making any changes. It also that FinOps does not interfere with any processes in your environment.
When the read-only access has been granted, the following data is used:
Billing information, including all details related to your cloud expenses.
For actively discoverable types, the current state of resources is collected. This is essential for implementing constraints like Time to Live (TTL), expense limits, and recommendations.
When a quota or budget policy has been created, Organization Managers can edit the policy name or delete the policy.
When editing a policy, you cannot change the policy type or update properties, including filters associated with the quota or budget.
To rename an existing quota or budget policy:
Navigate to the Quotas and budgets
If you experience an issue with FinOps for Cloud, you can contact Marketplace Platform Support.
Our support team is here to assist you with any technical issues and troubleshoot errors you may encounter while using FinOps for Cloud.
When contacting Marketplace Platform Support, provide as much detail as possible to help us understand your issue. Here are some important points to include in your support request:
At SoftwareOne, we believe in the power of open source. Open source communities drive innovation, foster transparency, and accelerate progress through shared knowledge and collaborative development. This belief has shaped the foundation of our latest FinOps tool, , which is built on top of the open-source project developed by .
FinOps for Cloud represents a key step in SoftwareOne’s commitment to delivering powerful, user-centric tools for cloud financial operations. By leveraging OptScale, an advanced open source platform for cloud cost management and optimization, we are able to accelerate value delivery to our customers while aligning with a growing and active open source ecosystem.
Our collaboration with Hystax has been instrumental in bringing this vision to life. We are deeply grateful for the open and cooperative relationship we enjoy with their team, and we recognize the high-quality foundation their work on OptScale provides. As part of this collaboration, SoftwareOne is proud to contribute back to the OptScale project and support its continued evolution.
The Billing Reimport option is available on the details page of a data source in FinOps for Cloud.
This feature allows you to manually reimport your billing data starting from a specific date into FinOps for Cloud. You can manually reimport data if:
Your billing data has not been imported as expected.
You have made configuration or permission-related changes that require reimporting data to reflect those updates.
Gray (Off) - You won't receive email notifications.
General FAQs
Find answers to the common questions about, FinOps for Cloud, including setup, access, and more.
Billing and Invoicing FAQs
Find answers to questions about pricing, invoices, billing cycles, and more.
Data Sources FAQs
Find answers to questions about adding and managing data sources.
Run the script as follows: bash <script_name> <path to json file>.
Run the script as follows: bash <script_name> <path to json file>.
The initial release of FinOps for Cloud focuses on delivering core capabilities that empower organizations to gain visibility into cloud usage and manage costs effectively. While this version does not yet include the full suite of features available in OptScale, it has been designed with scalability and extensibility in mind.
As we continue to evolve our FinOps strategy and product roadmap, we are actively evaluating additional OptScale capabilities and assessing how best to bring them to our users. Our intent is to provide a balanced experience that meets enterprise needs while remaining tightly aligned with the open source project's development.
SoftwareOne remains committed to fostering open source collaboration. Our work with Hystax and the OptScale community is just the beginning. By contributing code, sharing feedback, and engaging with the broader community, we aim to support and extend the ecosystem that enables cost-efficient, cloud-native operations for organizations around the world.
We look forward to continuing this journey and invite our partners, customers, and the open source community to join us as we build the future of FinOps together.
Select Standard data export (CUR 2.0)
If you used the same S3 bucket as your legacy CUR reports, update the Export name and Export path prefix.
If you created a new S3 bucket for your CUR 2.0 reports, update the Export name, S3 bucket name, and Export path prefix.
Select Save and wait for a new export to import.





If you selected the Tags correlation option, specify the primary and correlated tags.
(Optional) Use filters to apply additional tagging rules.
Select Save to finish creating the policy.

(Optional) Apply additional filters as needed.
Select Save to finish creating the new policy.

No status information yet means that the policy is newly created and hasn't run an evaluation cycle, or the filters may exclude all current resources, resulting in no data to check.
Read a brief description of what the policy monitors, including the scope, type, and enforcement timeline.
Access all resources associated with the tagging policy by selecting the Show resources icon in the Actions column.

$260.2Pointed circles represent only one provider (for example, the pointed circle over Poland in the above image shows Azure-only spend of $79.44).
Hovering over a circle displays detailed information, including the geographical location and expenses. You can also drill down to the list of resources by selecting Show resources.


View the resources connected to policy by selecting the Show resources icon in the Actions column.










Navigate to the Add automatic Resource Assignment Rule page using one of the following steps:
Open the Pools page and select Configure assignment rules. Next, on the Assignment rules page, select Add.
Open the Resources page and select a resource. On the resource's details page, select Add assignment rule.
Under Name, enter a name for the rule.
Under Conditions, select all conditions that must be fulfilled for the rule to become applicable. The following conditions are available:
Name/ID starts with
string value
Matches resources where the name or ID begins with the specified value.
Name/ID ends with
string value
Matches resources where the name or ID ends with the specified value.
Name/ID is
string value
Matches resources with an exact name or ID match.
Name/ID contains
string value
Matches resources where the name or ID contains the specified substring.
Add additional conditions as required.
Under Assign to, review the Target pool and Owner. By default, the matching resource is included in the selected target pool and assigned to an owner. You can change the values as relevant.
Select Create to finalize the rule.
Monitoring data from the cloud is used to identify underutilized instances.
The following sections explain how FinOps for Cloud obtains these details for each of the supported cloud platforms.
For AWS accounts:
The billing information is retrieved from the Data Exports located in a designated S3 bucket in the cloud. For details, see GetObject in the AWS S3 API Reference Guide.
Amazon CloudWatch is the source of monitoring data.
Resource discovery is done using the Discovery API. For reference, see the following pages in the Amazon EC2 API Reference:
DescribeInstances - Describes the specified instances or all instances.
- Describes the specified EBS volumes or all of your EBS volumes.
- Describes the specified EBS snapshots available to you or all of the EBS snapshots available to you.
- Returns a list of all buckets owned by the authenticated sender of the request.
For Azure cloud accounts:
The billing information is retrieved from the Billing API. For details, see Usage Details - List in the Microsoft documentation.
Cloud's monitoring service is used as the source of all monitoring data.
Resource discovery is done using the Discovery API. For reference, see the following pages in Microsoft documentation:
Virtual Machines - List All - Lists all of the virtual machines in the specified subscription.
- Lists all the disks under a subscription.
- Lists snapshots under a subscription.
- Lists all the storage accounts available under the subscription.
For Google Cloud accounts:
The billing information is retrieved from the BigQuery Service.
Cloud's monitoring service is used as the source of all monitoring data.
Resource discovery is done using the Discovery API. For reference, see the following pages in Google Cloud documentation:
Method: instances.list - Retrieves the list of instances contained within the specified zone.
- Retrieves a list of persistent disks contained within the specified zone.
- Retrieves the list of Snapshot resources contained within the specified project.
- Retrieves a list of buckets for a given project, ordered in the list lexicographically by name.
- Retrieves a list of addresses contained within the specified region.
In the list of policies, find the policy you want to manage, then select the policy name.
On the policy details page, select the edit icon .
Under Name, enter the new name, then save your changes.
Deleted policies cannot be restored.
To delete an existing quota or budget policy:
Navigate to the Quotas and budgets page.
In the list of policies, find the policy you want to manage, then select the policy name.
On the policy details page, select Delete.
In the confirmation panel, select Delete to confirm the action.
The number of people affected by the issue.
Your expected outcome.
Your organization ID (available on the Settings page).
If applicable, a screenshot of the error message or the full text. You can also include a screen recording.
Marketplace Platform Support is available Monday to Friday, from 05:30 to 19:30 UTC. You can contact us by email or create a support case.
To send us an email, use this email address: [email protected]
To create a support case:
Select the Help icon in the header and choose Support.
On the Help and Support page, select Submit a Ticket.
Complete the form according to your issue. Optionally, choose Select files to upload documentation that might help us understand and resolve your problem quickly.
Select Send to submit your request. If the Send button is unavailable, make sure you have entered the required information.
We aim to acknowledge all support cases on the same day as they are submitted, within our core business hours. However, the response time may vary during busy periods.
The SoftwareOne Platform YouTube Channel contains videos that you can use to learn more about FinOps for Cloud and how to use it effectively.
For the Marketplace Platform documentation, see this URL: https://docs.platform.softwareone.com/.
Before performing a billing reimport, note the following points:
Importing billing data from the specified date overwrites the existing billing records. This can cause discrepancies or interruptions in current billing data.
The reimport process is irreversible. Once the process has been initiated, it cannot be stopped. Additionally, the process could take some time to complete, depending on the amount of data.
The new billing data will be imported during the next billing import report processing.
To manually trigger a billing data reimport:
In FinOps for Cloud, navigate to the Data sources page.
Select the desired data source.
On the details page of the selected data source, select Billing reimport.
Choose the start date from which you want historical data imported, then select Set.
Select Schedule import to start the reimport process.
Navigate to the Tagging policies page.
Select the policy you want to manage. The details page of the policy opens:
Complete the following steps as necessary:
To edit the policy name, select the edit icon . Then, provide the new name and save your changes.
To delete the policy, select Delete and then select Delete again in the confirmation panel to confirm the action.
After signing in to FinOps for Cloud, the first thing you’ll see is the Home page.
The Home page is a dashboard that displays your organization’s current spending and projected expenses for the upcoming month.
The following sections are available on the dashboard. Note that selecting the forward arrowopens up the details page for that section:
Organization expenses - Displays the total expenses of the previous month, the expenses of the current month, and this month's forecast. The red line on the chart shows the expense limit.
Top resource expenses for the last 30 days - Displays the resources with the highest expenses. Select the resource to open its details page.
Recommendations - Displays the possible monthly savings. The expenses are separated into categories, such as Cost, Security, and Critical. Select the category to navigate to the Recommendations page.
Policy violations - Displays all policy violations along with the policy name and type. Select the policy name to open its details page. Pay special attention to the Status field. If it's red, it means the policy has been violated.
Pools requiring attention - Displays the Exceeded limit or Forecast overspend pools. Use the buttons in the Actions column to see the resources list and cost explorer.
The sidebar on the left is the main navigation menu containing these options:
- Displays all recommendations so you can get the most out of your connected data sources.
- Allows you to view and allocate your expenses for the cloud resources, monitor their performance, and set constraints. See Resources to learn about organizing and categorizing resources based on your specific requirements.
- Displays pools with limits or projected expenses. You can categorize resources into a hierarchy of pools manually or using assignment rules.
The Organization selector is available in the header.
It displays your current organization and enables you to switch between organizations if you belong to several organizations in FinOps.
You can also select Organization overview for an overview of all organizations and key information for each organization. Organizations that require attention and optimization are marked in red.
The header also includes these additional options:
- Select to access the product documentation.
- Select to sign out of your account.
FinOps for Cloud requires two policies, depending on the type of account being onboarded:
Billing import access policy - This policy allows FinOps for Cloud to read cost and usage data from the configured S3 bucket. This policy is only required when you are onboarding an account that contains a cost and usage report.
Resource discovery access policy - This policy allows FinOps for Cloud to discover new and changed resources in your AWS account more often than AWS updates the cost and usage reports. This allows FinOps for Cloud to show information about your spend that is more up-to-date than what is contained in the cost and usage report.
The billing import access policy is only required for accounts with cost and usage reports configured for FinOps for Cloud.
A suggested name for the policy is FinOpsForCloudBillingImport.
In the following policy, be sure to replace <bucket_name> with a valid name of your S3 bucket.
The resource discovery access policy is required for all accounts.
A suggested name for the policy is FinOpsForCloudResourceDiscovery.
To create a new IAM user for FinOps for Cloud, see in the AWS IAM User Guide.
When creating the user, use the following settings:
For User name, enter FinOpsForCloudUser.
In Provide user access to the AWS Management Console, select No.
Under Set permissions, select Attach policies directly.
To create an access key for FinOps for Cloud, see in the AWS IAM User Guide.
When creating the access key, choose Third-party service as your use case.
Be sure to store your access key and secret access key securely. This is your only chance to view or download the newly created access key, as it cannot be recovered later.
The Events page is a read-only page that allows you to view all events that have occurred within your organization.
The data on this page is continuously updated, so you can monitor and track events in real time. You can view both system-generated and user-generated events. The following are examples of events:
Discovery of new resources for cloud accounts.
Automatic assignment of resources to a pool.
Invitations sent to new account members.
Resource discovery failures.
In addition to viewing a list of events, you can also search for a specific event, filter the events based on severity, and select an event to view detailed event information.
By default, all events are displayed on the page.
To filter the list of events, choose from one of these options: Info, Warning, or Error.
Additionally, you can also use the date selector to choose a custom date range for the events you want to view.
To search for a specific event, enter a keyword in the Search field and press Enter.
To view detailed information for an event, select the event.
You can then view the date and time the event occurred, a description of the event, and details of the object involved in the event.
This topic describes how to connect your Google Cloud Platform (GCP) account to SoftwareOne's FinOps for Cloud. When connecting your account, you will need to provide the billing data details, such as the dataset name and table name.
To enable billing data export, see in the Google documentation.
After you have enabled billing data export, a new table is displayed in your BigQuery project.
Note the names of the dataset and the table. You'll need these details when connecting your cloud account to FinOps for Cloud.
This topic describes how you can add an Azure data source to FinOps for Cloud. It also describes the prerequisites that must be met to connect the source successfully.
When connecting your Azure data source to FinOps for Cloud, you must provide the following details from Microsoft Azure:
Application ID (client ID)
When you create a Cost and Usage Report in an AWS-linked account, the S3 bucket is automatically populated with data from the beginning of the current month.
However, if the AWS account has existed for longer than this period, you can request a backfill of historical cost and usage data.
To request a backfill of your historical data, create a support case with AWS.
For information on how to open a support case and the information to include in your request, see the following link in the AWS Data Exports User Guide:
Tag is
key-value pair
Matches resources with a tag that matches both the specified key and value.
Tag exists
key-value pair
Matches resources that have a tag with the specified key.
Tag value starts with
key-value pair
Matches resources with a tag value starting with the specified value for the given key.
Source is
selected row
Matches resources from a selected data source. Options are presented in a dropdown for selecting the source.
Resource type is
string value
Matches resources where the resource type contains the specified value.
Region is
string value
Matches resources where the region contains the specified value.

Cost map - Displays a breakdown of expenses and network traffic using an interactive map. You can view expenses by geographic location and service to identify areas of high spending.
Anomaly detection - Enables you to identify and respond to unusual patterns or deviations, control costs, and manage resources efficiently.
Quotas and budgets - Allows you to create quotas and budgets.
Tagging policies - Allows you to add new tagging policies and manage the existing ones.
User management - Allows you to invite new members to your organization and manage existing members.
Data sources - Enables you to add your billing data sources to FinOps for Cloud.
Events - Lets you see all events that have occurred within your organization. The events include informational messages, warnings, and error messages.
Settings - Allows you to view organization details, view pending invitations, and manage email notifications.


FinOpsForCloudResourceDiscovery (always required)
FinOpsForCloudBillingImport (required only for accounts with cost and usage reports buckets)
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "FinOpsForCloudGetBillingFiles",
"Effect": "Allow",
"Action": [
"s3:GetObject"
],
"Resource": "arn:aws:s3:::<bucket_name>/*"
},
{
"Sid": "FinOpsForCloudManageBillingBucket",
"Effect": "Allow",
"Action": [
"s3:PutBucketPolicy",
"s3:ListBucket",
"s3:GetBucketLocation"
],
"Resource": "arn:aws:s3:::<bucket_name>"
}
]
}{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "FinOpsforCloudGetResources",
"Effect": "Allow",
"Action": [
"s3:GetBucketPublicAccessBlock",
"s3:GetBucketPolicyStatus",
"s3:GetBucketTagging",
"iam:GetAccessKeyLastUsed",
"cloudwatch:GetMetricStatistics",
"s3:GetBucketAcl",
"ec2:Describe*",
"s3:ListAllMyBuckets",
"iam:ListUsers",
"s3:GetBucketLocation",
"iam:GetLoginProfile",
"cur:DescribeReportDefinitions",
"iam:ListAccessKeys",
"elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DescribeTags"
],
"Resource": "*"
}
]
}You can create a role using Google Cloud CLI or Google Cloud Console:
To assign the role via gcloud CLI, run the following command:
Sign in to the Google Cloud console.
In the Search bar, enter Roles, and then on the Roles page, click Create Role.
Provide the role title and description.
Click Add permissions and add the following permissions to the created role:
bigquery.jobs.create
bigquery.tables.getData
compute.addresses.list
compute.addresses.setLabels
Click Add.
Click Create.
Learn about service accounts in the Google documentation - Service accounts | IAM Documentation | Google Cloud.
To create a service account:
From your GCP console, select Service Accounts in the left-hand menu and click Create Service Account.
Enter a service account name and optionally, enter a description of the service account.
Select Create and continue.
Select the role you created and click Continue.
Select Done.
To generate an API key for your service account:
Find your service account in the service accounts list and click its name to go to the service account details page.
Go to the Keys tab.
Select Add key > Create new key.
The service account API key will be downloaded as a JSON file. Use this file when connecting your cloud account to FinOps.
Use the newly downloaded service account credentials JSON file with the billing dataset details to connect your GCP cloud account. Next, click Connect to complete the setup.

Client Secret
Directory (tenant) ID
Subscription ID
Additionally, the Reader role must be assigned to the application.
The following sections describe how to get these values from Azure. Once you have completed all the prerequisites, see Connecting your Azure data source for the next steps.
The application ID (client ID) must be generated manually in Azure to allow API communication with FinOps.
To generate the application ID (client ID):
In Microsoft Entra ID (formerly Azure Active Directory), navigate to App registrations.
Select New registration.
Provide a name for the application, for example, Optscale.
Select Register.
After the application is successfully registered, the application ID is displayed. Make a note of the value. You'll need to enter it in the Application (client) ID field within FinOps.
After registering the application, you must also explicitly grant it permissions using Role Assignment to work with the current Azure subscription. See Performing role assignment for details.
To generate a client secret:
In the Azure portal, navigate to your newly created application. Then, select Certificates & Secrets.
Select New client secret.
Provide a description of the secret and set the expiration date.
Select Add. The secret's value is displayed in the Value column.
Copy this value immediately. You'll need to enter it in the Secret field within FinOps when connecting your Azure subscription.
The secret's value is hidden shortly after its creation. Make sure to copy the value.
The Directory (tenant) ID is a globally unique identifier (GUID) that is different from your organization's name or domain. You can find this ID in the Microsoft Azure portal.
To locate your Directory ID in the Microsoft Azure portal:
Navigate to App registrations (for example, OptScale) > Overview > Directory (tenant) ID.
Copy the value. You'll need to enter it in the Directory (tenant) ID field within FinOps for Cloud when connecting the Azure subscription.
A subscription ID is a unique string that identifies your subscription.
To find the ID in the Microsoft Azure portal, search for Subscriptions. You'll see a list of all subscriptions associated with your Azure account. The list will include a subscription ID for each subscription.
To assign the reader role to the subscription you have provisioned to be linked to FinOps:
In the Azure portal, navigate to Subscriptions.
Select the subscription. You'll be directed to its dashboard.
In the left sidebar, select Access control (IAM) and select the Role assignments tab. Then, select Add > Add role assignment.
In Add role assignment, do the following:
On the Role tab, choose Reader and select Next.
On the Members tab, make sure that User, group, or service principal is selected. Then, select Next.
The third field should contain the name of a registered application from the previous steps, for example, FinOps. Select Next.
On the Review + assign tab, review the role assignment settings, then select Review + assign to assign the role.
When all of the prerequisites are complete, you can connect your Azure data source to FinOps for Cloud.
To connect the data source:
Navigate to the Data sources page, then select Azure.
Choose the connection type: Tenant or Subscription.
Provide the information for that connection:
Name - Enter a meaningful name for the data source.
Directory (tenant) ID - Enter the unique identifier of the tenant.
Subscription ID - Enter the ID for the Azure subscription you want to integrate. You can find this ID in the Azure Portal. This field is required only if the connection type is Subscription.
Application (client) ID - Provide your application ID (client ID).
Secret - Provide your client secret.
Select Connect.
FinOps for Cloud validates the information. When the validation completes, the data is pulled from the source and displayed in the platform.
To perform a billing reimport in FinOps for Cloud:
Navigate to the Data sources page.
Select the AWS data source containing the updated S3 bucket, then select Billing reimport.
In Import from, choose the start date of your historical billing data.
Select Schedule import.
Once the import process has been initiated, it might take several hours for the process to complete, depending on the amount of historical data.

This topic describes how you can add your AWS data sources to the FinOps platform. FinOps for Cloud supports both AWS organizations and individual AWS standalone accounts.
The following table contains AWS data sources terminology:
Management account
The following table describes the terminology used in FinOps for Cloud when adding an AWS data source:
Depending on the access to your management account and other member accounts, there are different ways to add AWS data sources to FinOps for Cloud.
If you have access to create a Cost and Usage Report (CUR) and Identity and Access Management (IAM) users in your management account, follow these steps:
When the member accounts are added, FinOps for Cloud automatically identifies the management account and uses the imported cost and usage data from that account.
If you don't have access to your management account, you can create individual CURs in each member account and add them to FinOps for Cloud as if they were AWS Root Accounts.
To add your member account to FinOps as an AWS Root account:
.
.
.
To add a standalone AWS account:
.
.
.
gcloud iam roles create optscale_connection_role --project=hystaxcom --permissions=bigquery.jobs.create,bigquery.tables.getData,compute.addresses.list,\compute.addresses.setLabels,compute.disks.list,compute.disks.setLabels,compute.firewalls.list,compute.globalAddresses.list,compute.instances.list,compute.instances.setLabels,compute.images.list,compute.images.setLabels,compute.machineTypes.get,compute.machineTypes.list,compute.networks.list,compute.regions.list,compute.snapshots.list,compute.snapshots.setLabels,compute.zones.list,iam.serviceAccounts.list,monitoring.timeSeries.list,storage.buckets.get,storage.buckets.getIamPolicy,storage.buckets.list,storage.buckets.updatecompute.disks.list
compute.disks.setLabels
compute.firewalls.list
compute.globalAddresses.list
compute.instances.list
compute.instances.setLabels
compute.images.list
compute.images.setLabels
compute.machineTypes.get
compute.machineTypes.list
compute.networks.list
compute.regions.list
compute.snapshots.list
compute.snapshots.setLabels
compute.zones.list
iam.serviceAccounts.list
monitoring.timeSeries.list
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.list
storage.buckets.update








To download the Cost Explorer data as a PDF, select the Download option on the Cost Explorer page. To learn more, see Cost Explorer.
To add your member accounts:
.
.
Repeat steps 1 - 4 for each member account you want to add.
A management account is an AWS account you use to create your AWS Organization. The owner of the management account is responsible for paying for all usage, data, and resources used by the accounts in the organization.
A management account is also called a root account, master account, billing account, or payer account.
Member account
A member account is an AWS account, other than the management account, that is part of an AWS Organization. The management account is responsible for paying for all member accounts in the organization.
A member account is also referred to as a linked account, child account, usage account, or sub-account.
Standalone account
A standalone account refers to an account that is not part of an AWS Organization. It stands on its own, without being linked to any other accounts for consolidated billing, management, or policy control.
A standalone account is also referred to as an individual account, non-organizational account, or unlinked account.
Root
Use this option when:
Adding an AWS organization management account.
Adding an AWS organization member account (when you don't have access to a management account)
Adding an AWS standalone account.
Linked
Use this option when adding an AWS organization member account, and the management account is already added.
Billing management presents data directly from your billing documents, such as invoices and statements. You can access this data only after these documents have been issued, and the amount will match exactly what is listed on your invoice.
Your invoice is generated at the end of your monthly billing period, whereas FinOps data is updated daily, so you can proactively monitor expenses.
Your FinOps account may show cost information from various cloud service providers, like Microsoft and AWS, whereas your invoice only contains subscriptions and items ordered through SoftwareOne Marketplace.
The following table summarizes these differences:
Amount
Always shows the estimated amount for the current period.
Always shows the exact amount.
Subscriptions
Contains subscriptions from all connected cloud service providers.
Contains SoftwareOne subscriptions only.
Data availability
Available daily, even before the invoice has been issued.
Available monthly, only after the invoice is generated.
Other features
Offers enhanced features, like tagging policies and budgets.
To learn more about SoftwareOne invoices and billing documents, see Understand Your Billing Documents.
Images that haven't been used for a while might be subject to deletion, which would unlock the underlying snapshots. Image selection criteria:
The image creation date was more than 1 week ago.
No instances have been created from/related to this image in the past 7 days.
You can download the list of obsolete images as JSON for subsequent automated processing with the help of Cleanup Scripts.
Redundant and old snapshots save up on storage expenses if deleted. You can download the list of snapshots as JSON for use in further implementations like clean-up scripts and maintenance procedures. Selection criteria:
The source EBS volume doesn't exist anymore.
No AMIs are created from this EBS snapshot.
It hasn't been used for volume creation for the last 4 days.
The list of obsolete snapshots can be downloaded as JSON for subsequent automated processing with the help of Cleanup Scripts.
Obsolete IPs can be tracked for Azure and AWS clouds to reduce expenses. The following is the selection criteria for the obsolete IPs:
The IP was created more than 7 days ago.
The IP hasn't been used in the last 7 days.
It costs money to be kept.
Notification about volumes that haven't been attached for more than one day. These are considered to be forgotten or no longer relevant. We recommend that you delete such resources.
You can download the list of unattached volumes as JSON for subsequent automated processing with the help of Cleanup Scripts.
This recommendation is aimed at the detection of underutilized instances in AWS and Azure and suggests more suitable flavors for these machines. An instance is considered to be underutilized if:
It is active.
It has existed for more than 3 days.
Its CPU metric average for the past 3 days is less than 80%.
This card contains instances that are active and have sustainable compute consumers for more than 90 days. Instances that haven't been covered with Reserved Instances or Saving Plans are also included.
For all such instances, consider purchasing Reserved Instances to save on compute usage. Check RI/SP Coverage to see the detailed breakdown of current reservations.
This card shows Kinesis Streams with provisioned Shard capacity that haven't performed operations in the last 7 days. Consider removing them to reduce expenses.
This card shows opportunities to migrate instances if the tool detects that the same instance type is cheaper in a geographically close region (within the same continent).
Some of your active instances might cost less in another nearby region with the same specifications. Consider migrating them to the recommended region to reduce expenses.
This recommendation means that some of your instances have an inactivity pattern that allows you to set up an on/off power schedule (average CPU consumption is less than 5% and network traffic below 1000 bytes/s for the last 14 days). Consider creating a power schedule to reduce expenses.
This list contains instances that:
Are running for the last 3 days.
Have existed for less than 6 hours.
Were not created as Spot (or Preemptible) Instances. Consider using Spot (Preemptible) Instances.
An underutilized instance is one average CPU consumption of less than 80% for the last 3 days. FinOps for Cloud detects such active RDS instances and lists them on the card. Consider switching to the recommended size from the same family to reduce expenses.
Some snapshot chains don't have source volumes or images created from their snapshots and have not been used for volume creation for the last 3 days. Consider their deletion to save on snapshot storage expenses.
The instances in the list are active and have been identified as sustained compute consumers (for more than 90 days) but are not covered by subscription or Savings Plans. Consider purchasing subscriptions to reduce computing costs.
Detection of inactive, non-deallocated machines that have not been running for more than 1 day and are still billed by the cloud.
You can download the list of non-deallocated VMs as JSON for subsequent automated processing with the help of Cleanup Scripts.
Upgrade older generation instances to the latest generation within the same family.
A bucket is abandoned if the average data size is less than 1024 megabytes, the Tier1 request quantity is less than 100, and the GET request quantity is less than 2000 for the last 7 days.
We recommend that you delete it to reduce expenses. Change the check period and other parameters in the card's Settings.
The Assignment rules page in FinOps for Cloud allows you to add a new automatic resource assignment rule.
From this page, you can also reapply the entire ruleset to all resources within a selected pool, even if the ruleset was previously assigned manually.
You can manage existing rules and search for specific rules using filters such as Name, Assigned To, Conditions, and Priority.
Navigate to the Pools page.
Select Configure assignment rules. The list of rules is displayed.
For each rule, you can view the following details:
Name - The name of the rule. Active rules are marked with green dots next to their names, and inactive ones are marked with grey dots.
Assign to - The pool and the owner to whom the resource is assigned.
Conditions - Shows a summary of the conditions that trigger the rule.
Priority - Displays the priority used to apply assignment rules to resources.
The Actions column on the Assignment Rules page contains options you can use to manage your existing rules.
To modify a rule, select the edit icon . You can edit the name of the rule, conditions, and assignment details. You can also enable or disable the rule.
To set the rule priority to the highest, select . The priority of the other rules is then decreased by one.
To decrease rule priority by 1, select . The rule is then swapped with the rule behind it.
To increase the rule priority by 1, select . The rule is swapped with the previous rule.
Doesn't offer advanced analytics and monitoring.
To assign the rule with the lowest priority across the given organization, select . All other affected rules are then updated.
To delete a rule, select . To learn more, see Delete Pools.

Please read these terms of use carefully.
Welcome to SoftwareOne’s FinOps for Cloud! Please read this agreement (“Agreement”) carefully before using the FinOps for Cloud Services or website. The FinOps for Cloud Software as a Service (“SaaS”) license granted by this Agreement is conditioned upon the organization identified within the Interface (“Company”) having executed a software purchase or other service agreement (“Contract”) with SoftwareOne AG or one of its affiliates (“SoftwareOne”) and allows Company to use the Services, associated software, and Interface for the purposes stated in this Agreement and the Contracts.
If your Company does not have a Contract with SoftwareOne, then your Company does not have a license to the Services. If you or your Company has been provided access to the Services without a Contract with SoftwareOne, then do not use the Services and contact SoftwareOne immediately using the information found at .
Last updated: 7 May 2025
By clicking “I Accept” in an electronic version of this Agreement, or making any use of the Services or Interface you are accepting the terms and conditions of this Agreement on behalf of your Company and you are representing that you have full legal authority to accept this Agreement on behalf of your Company. If you do not agree to the terms of this Agreement, or do not have the necessary authority to bind your Company, do not use the Services or Interface and contact SoftwareOne regarding the Contracts.
The Services are made available to achieve and manage the purposes described in the Contracts and to create, manage and submit Content. The Organization Manager must be at least eighteen (18) years of age to enter into this Agreement and open a FinOps for Cloud account with SoftwareOne. Once an authorized representative of Company creates the FinOps for Cloud account and identifies an initial Organization Manager, SoftwareOne will generate the Organization Manager’s login credentials and Company will be responsible for all activities occurring under its FinOps for Cloud account. The Organization Manager, and each User are responsible for keeping their respective account user names and passwords safe and secure. Users shall not share their login credentials with anyone. SoftwareOne may refuse any request to open an account for any reason. Certain Services may require the acceptance of additional terms or license agreements (“Additional Terms”), which will be presented to the Organization Manager within the Interface or another form, as SoftwareOne deems appropriate prior to the purchase of such Services. Upon acceptance, the Additional Terms will become part of this Agreement as if set forth in full herein. SoftwareOne may send Users announcements, administrative messages, and other information. Each individual User may opt out of some of those communications if they are not essential to the delivery of the Services. The type of Services available will be set by SoftwareOne and a Organization Manager and each User’s access to the Services is dependent upon the permissions role as set by the Organization Manager. “Organization Manager” means an employee of Company that has the authority and permission to edit user access, rights, and capabilities. “User” means an employee of Company that is authorized to use the Services by the Organization Manager. References to a User and Users herein include the Organization Manager.
The Organization Manager shall notify SoftwareOne if
any User of the Services leaves the employment of Company
Company wishes to remove any of Company’s designated Users from the Services. A Organization Manager may block, but not remove a Company user from accessing the Services.
Company shall ensure that each User of the Services and Interface use them only for lawful purposes and consistent with the terms of this Agreement; by way of example, the following are prohibited:
Uploading or transmitting Content that violates or promotes the violation of, any applicable law, rule or regulation;
Uploading or transmitting Content that promotes violence or contains violent materials;
Uploading or transmitting Content that infringes the intellectual property or proprietary rights of others, including patent, copyright, trademark and trade secret rights;
Uploading or transmitting Content that is unlawful, libelous, defamatory, obscene, pornographic, indecent, lewd, harassing, threatening, harmful, invasive of privacy or publicity rights, abusive, inflammatory, or otherwise objectionable;
Uploading or transmitting harmful Content, including viruses, trojan horses, worms, time bombs, cancelbots, or any other computer programming routines that may damage, interfere with, surreptitiously intercept, or expropriate any system, program, data, or personal information;
Uploading or transmitting Content that promotes discrimination or employs discriminatory practices based on race, sex, religion, nationality, sexual orientation, or age;
Uploading or transmitting Content offering or disseminating fraudulent goods, services, schemes, or promotions (for example, make-money-fast schemes, chain letters, pyramid schemes);
The use of the Services for commercial purposes, other than Company’s internal purposes or to receive the benefits under the Contracts; and
Using the Services to impersonate any person or entity, including the forging of an electronic mail message.
Company is responsible for use of the Services and Interface by its employees, independent contractors, and other representatives. SoftwareOne may suspend or cease providing access to the Services if Users do not comply with SoftwareOne’s requirements or if SoftwareOne is investigating suspected misconduct.
Third Party Content. The Services display some material that is not the property of SoftwareOne (e.g. maps). This material is the sole responsibility of its owner. SoftwareOne may review third party material to determine whether it is illegal or violates our policies, and may remove or refuse to display what it reasonably believe violates our policies or the law.
Company Content. The Services allow Users to submit and manage Content for use as provided in the Interface and Contracts. Company retains all right, title and interest in all Content that Users upload into the Services. When a User uploads or otherwise submits Content to the Services, Company hereby grant SoftwareOne a perpetual, worldwide, royalty free, fully paid up license to use, host, store, reproduce, modify, create derivative works from, communicate, sub-license, update, display and distribute (to Company and its authorized users of the Services) such Content to: (i) perform any requirement stated in the Interface and the Contracts; (ii) allow SoftwareOne to perform and improve the Services; (iii) to develop new services. If the Content contains any confidential information it will be maintained pursuant to the confidentiality provisions of the Contract. By submitting Content to SoftwareOne, Company represents and warrants that it has all necessary rights and authorizations to do so. SoftwareOne may reject Content if it determines that it is unsuitable for any reason. SoftwareOne may use, reproduce, sell, publicize, or otherwise exploit Aggregate Data in any way. “Aggregate Data” means Content that has been anonymized to remove personally identifiable information, Company identifying information, including the names and addresses of Company and any of its Users or customers.
Risk of Exposure. Company recognizes and agrees that storing Content online involves risks of unauthorized disclosure or exposure and that, in accessing and using the Services, Company assumes such risks. SoftwareOne offers no representation, warranty, or guarantee that Content will not be exposed or disclosed through errors or the actions of third parties.
Accuracy of Content. SoftwareOne will not be responsible and liable for the accuracy of Content uploaded to the Services.
Deletion of Content. SoftwareOne may permanently erase Content if: (i) Company’s account is delinquent, suspended, or terminated for 30 days or more; or (ii) Company breaches this Agreement or any Contract.
Limited License. The use of the Services may require the use of downloadable and non-downloadable software (“Software”) that is the property of SoftwareOne or its licensors. During the term of this Agreement, SoftwareOne hereby grants Company a limited, non-assignable, non-sublicenseable, non-exclusive, license to use the Software through the Interface for the sole purpose of using the Services and submitting Content. This license will immediately and automatically terminate: (i) if Company fails to comply with its obligations under this Agreement or a licensor’s licensing terms at any time; or (ii) upon the termination of this Agreement.
Obligations & Restrictions. Company is solely responsible for its use of the Services and Interface, including any Content submitted thereto. Company shall only use the Services, for Company’s internal business purposes and in compliance with this Agreement, any access instructions contained on within the Interface, and all applicable local, state, national and international laws, rules, and regulations. Company shall not: (i) improperly access or tamper with the Services; (ii) attempt to interfere with or disrupt the Services, or Interface for any other user; (iii) license, sublicense, sell, resell, transfer, assign, distribute, or otherwise commercially exploit the Services or make them available to any third party in any way or use the Services for service bureau or time-sharing purposes or in any other way allow third parties to exploit the Services; (iv) modify or make derivative works based upon the Services; (v) create internet “links” or “frame” or “mirror” any Content of the Services, on any other server or wireless or internet-based device; (vi) translate, reverse engineer, disassemble, decompile, recompile, update, or modify all or any part of the Services; (vii) allow any other party to use or access the Services without the express written consent of SoftwareOne; (viii) attempt to gain unauthorized access to the Services; (ix) make any other use of the Services that is contrary to the terms of this Agreement or any Contract; or (x) access the Services in order to build a competitive product or service, to build a product using similar ideas, features, functions or graphics of the Services, or to copy any ideas, features, functions or graphics of the Services.
Reservation of Rights. Except for the limited licenses granted in section 4(a), SoftwareOne hereby reserves all right, title and interest (including all intellectual property and proprietary rights) in and to the Services. If Company communicates any ideas or suggestions (“Feedback”) to SoftwareOne, SoftwareOne will own all right, title and interest in and to such Feedback and will be entitled to use it without restriction. Company hereby irrevocably assign all right, title and interest in and to such Feedback to SoftwareOne and shall provide SoftwareOne with such assistance as SoftwareOne may reasonably require to document, perfect or maintain its rights in and to such Feedback.
Any fees for the Services are stated either within the Interface or the applicable purchase order and invoice between SoftwareOne and Company. Modification to the Services beyond the scope of the applicable purchase order and invoice may result in an additional charge to Company. The fees exclude all applicable sales, use, and other taxes (other than taxes on SoftwareOne’s income), duties, charges, and related fees and penalties in each case arising from any payments to be made to SoftwareOne under this Agreement (collectively, “Taxes”), and Company will be responsible for payment of all Taxes. Company shall make all payments of fees to SoftwareOne free and clear of, and without reduction for, any withholding taxes; any such taxes are the sole responsibility of Company, and Company shall provide SoftwareOne with official receipts issued by the appropriate taxing authority, or such other evidence as SoftwareOne may reasonably request, to establish that such taxes have been paid. Fees are non-refundable upon the termination of this Agreement by Company. If SoftwareOne terminates this Agreement for any reason other than a breach of the Agreement by Company, then SoftwareOne will refund any prepaid fees for the remaining term of the Services. Any such refund will be paid within forty-five (45) days of SoftwareOne’s notice of termination.
Confidential Information. “Confidential Information” means non-public information of a competitive or commercially sensitive, proprietary, financial, or trade secret nature, or information that involves or implicates privacy interests. Confidential Information includes any information labeled “Confidential” or “Proprietary”, business plans, strategies, forecasts, analyses, financial information, employee information, technology information, trade secrets, products, technical data, specifications, documentation, rules and procedures, methods, contracts, presentations, know-how, product plans, business methods, product functionality, data, customers, markets, competitive analysis, databases, formats, methodologies, applications, developments, inventions, processes, payment, delivery and inspection procedures, designs, drawings, algorithms, formulas or information relating to engineering, marketing, or finance and any other information that the Recipient should reasonably believe to be confidential given the circumstances.
Exclusions from Confidentiality. Confidential Information excludes information that: (i) is known by the Recipient prior to its receipt; (ii) is now or becomes publicly known by acts not attributable to the Recipient; (iii) is disclosed to Recipient by a third party who has the legal right to make such a disclosure; (iv) is disclosed by the Recipient with Discloser’s prior written consent; (v) is subsequently developed by the Recipient independently of any disclosures made hereunder and without use or access to any of the Discloser’s Confidential Information; or (vi) is required to be disclosed pursuant to governmental regulation or court order.
Confidentiality Obligations. Each party acknowledges that certain information it will receive from the other party may be Confidential Information of the other party. Any party receiving Confidential Information (“Recipient”) shall exercise the same degree of care and protection with respect to the Confidential Information of the party disclosing Confidential Information (“Discloser”) that it exercises with respect to its own Confidential Information, but in no event less than a reasonable standard of care. Recipient and its Personnel may only use Discloser’s Confidential Information to the extent necessary to fulfill its obligations under this Agreement during the term hereof. The Recipient shall not, directly or indirectly, disclose, copy, distribute, republish or allow any third party to have access to any Confidential Information of the Discloser.
Injunctive Relief. Each party acknowledges that any violation of its obligations relating to Confidential Information, and Services would result in damages to the other party that are largely intangible but nonetheless real, and that cannot be remedied by an award of damages. Accordingly, any such violation will give the other party the immediate right to a court-ordered injunction or other appropriate order to enforce those obligations. A party’s right to injunctive relief is in addition to any other rights and remedies available to such party at law and in equity. The prevailing party obtaining injunction will be entitled to recover all reasonable expenses, including attorney fees, incurred in obtaining such enforcement.
Copyrights. SoftwareOne respects the intellectual property rights of others and expects Users to do the same. SoftwareOne will respond to notices of alleged copyright infringement and terminate accounts of repeat infringers according to the process set out in the US Digital Millennium Copyright Act. Copyright concerns should be delivered to [email protected].
Privacy. SoftwareOne is committed to protecting the privacy of our customers. Information SoftwareOne collects from Users is used solely for purposes of managing our relationship with Company or as otherwise provided in SoftwareOne’s Privacy and Security Policy, a copy of which can be viewed here https://www.softwareone.com/en/privacy-statement. By using the Services, Company represents and warrants that it has obtained all necessary permissions for SoftwareOne to use personal data of Users in accordance with our Privacy and Security Policy.
Data Protection. SoftwareOne acknowledges and agrees that it has appropriate experience and capabilities, and will implement appropriate technical and organizational measures, to ensure that the processing of personal data by Company in the course of providing the Services will meet such requirements of the applicable data protection laws and regulations as apply to SoftwareOne in its capacity as a data processor, provided always that Company acknowledges and agrees that SoftwareOne shall not be in breach of this clause where any failure to comply with data protection laws and regulations is caused by or results from the acts or omissions of Company, its officers, employees or agents.
How SoftwareOne Uses "Cookies." SoftwareOne uses a feature on an internet browser called a "cookie." Cookies are small files that a web browser places on a computer's hard drive. SoftwareOne uses cookies to let it know that a User has an account with SoftwareOne, and is authorized to use Services. SoftwareOne may also use cookies to retrieve certain information Users have previously provided so that they do not need to re-enter this information every time. Cookies are not used to access information entered on the secure server. This information can only be accessed when a User enters their username and password.
Security. A User’s personal information, such as name, address, phone, email, or credit card number, is never stored in a cookie. It is stored on SoftwareOne’s secure server, and is not available to any other site.
The term of this Agreement will begin upon acceptance of this Agreement and will end when terminated by either Company or SoftwareOne. Company may terminate this Agreement at any time and for any reason by providing SoftwareOne with written notice. SoftwareOne may terminate this Agreement and all User accounts for any reason or no reason, without notice. This Agreement will automatically terminate, without notice, upon termination of the Contracts between SoftwareOne and Company. Upon any termination of this Agreement, Company shall immediately cease all use of all the Services and Interface. Any provisions that would, by their nature, survive the termination or expiration of this Agreement will so survive, including Sections 3, 4(e), 6, 7, 10, 11, 12, 14, 15 and 16.
SoftwareOne may change or improve the Services, including adding or removing functionalities and features, or suspend or stop the Services completely. Company may stop using the Services at any time. SoftwareOne may stop providing the Services or add or create new limits to the Services at any time. If SoftwareOne suspends Services that contain Content, it will provide Company with reasonable advance notice to allow it to remove that Content from that particular Service. Due to things like changes in the law or technology, SoftwareOne may modify the terms and conditions contained in this Agreement at any time by posting a change notice within the Interface. SoftwareOne may also require Company to accept an updated version of this Agreement reflecting such modified terms and conditions. If any modification is unacceptable Company’s only recourse is to terminate this Agreement. Company’s continued use of the Services following any posting of a change notice or revised Agreement will constitute binding acceptance of the revisions.
Each party represents that it has all necessary right, power and authority to enter into this Agreement and that upon Company’s acceptance it will create a binding contract between the parties. Company represents and warrants that: (i) it is the owner or authorized licensee of all Content uploaded or transmitted to the Services; (ii) Company has all necessary rights to grant the Content license to SoftwareOne; (iii) the submission of Content does not violate the intellectual property rights of any third party; (iv) that each User is at least eighteen (18) years of age; (v) all Content uploaded or transmit using the Services is complete, accurate and correct; and (vi) Company and its Users will comply with all applicable laws, rules, and regulations in the use of the Services.
Company shall indemnify SoftwareOne, including its employees, officers, directors and agents for all losses and liabilities, including reasonable attorneys’ fees and costs, arising from any of the following: (i) Company’s breach of any of its representations, warranties or obligations under this Agreement; (ii) Company’s use of the Services, including the use of Services by Company’s authorized users in violation of this Agreement; and (iii) any claim that the Content infringes any patent, copyright, trademark, trade secret, or other proprietary right. SoftwareOne shall indemnify Company, including its employees, officers, directors and for all losses and liabilities, including reasonable attorneys’ fees and costs, arising from any claim alleging that the Services infringe any patent, copyright, trademark, trade secret or other proprietary right. The forgoing indemnification is conditioned upon the indemnified party: (a) providing the indemnifying party with timely written notice of the applicable claim; (b) tendering the exclusive control over the defense and settlement of the claim to the indemnifying party; and (c) cooperating with the indemnifying party in the defense and settlement of the claim at the indemnifying party’s expense.
SoftwareOne cannot and does not warrant, verify, or guarantee the quality, accuracy, or integrity of Content uploaded or transmitted to the Services. Company is solely liable for all Content. SoftwareOne makes no representation or warranty that it will review any of the Content for accuracy. Company’s access to and use of the Services is at its own risk. The Services are licensed as a service on an “AS IS” and “AS AVAILABLE” basis. SOFTWAREONE HEREBY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. WITHOUT LIMITING THE GENERALITY OF THE FORGOING, SOFTWAREONE MAKES NO WARRANTY THAT: (I) THE SERVICES WILL MEET COMPANY’S REQUIREMENTS; OR (II) THE SERVICES BE AVAILABLE ON AN UNINTERRUPTED, SECURE OR ERROR-FREE BASIS.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, SOFTWAREONE WILL NOT BE LIABLE FOR ANY SPECIAL, EXEMPLARY, PUNITIVE, CONSEQUENTIAL, INCIDENTAL OR INDIRECT DAMAGES, OF ANY KIND, INCLUDING LOST PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS OPPORTUNITY, OR GOODWILL, OCCASIONED BY THE BREACH OF ANY OBLIGATION UNDER THIS AGREEMENT FOR ANY CAUSE WHATSOEVER, WHETHER FORESEEABLE OR NOT, ON ANY THEORY OF LIABILITY EVEN IF SOFTWAREONE HAS BEEN NOTIFIED OF THE POSSIBILITY OF SUCH DAMAGE, AND NOTWITHSTANDING THE FAILURE OF THE ESSENTIAL PURPOSE OF ANY REMEDY SPECIFIED IN THIS AGREEMENT. SOFTWAREONE’S MAXIMUM TOTAL LIABILITY TO COMPANY FOR USE OF THE SERVICES WILL BE EQUAL TO THE TOTAL AMOUNT PAID BY COMPANY DURING TWELVE MONTHS LEADING UP TO ANY CLAIM.
Some jurisdictions do not allow for certain limitations on liability, so the above may not apply to Company.
The parties are independent contractors. Nothing in this Agreement creates any partnership, joint venture, agency, franchise, or employment relationship between Company, and SoftwareOne. Company has no authority to make or accept any offers or representations on SoftwareOne’s behalf.
In case of any controversy or dispute, SoftwareOne and Company shall discuss the matter in controversy or dispute and make a diligent effort to find an amicable solution. If an amicable solution is not reached, all disputes arising out of or in connection with this Agreement or its validity will be finally resolved by the courts of the state/country in which the offices of the SoftwareOne affiliate entering into the Contract are located. The United Nations Convention on the International Sales of Goods will not apply to these Terms or any Contract. SoftwareOne may obtain injunctive or other relief in any state, federal or national court of competent jurisdiction for any actual or alleged infringement of its intellectual property or proprietary rights. The Services are of a special, unique and extraordinary character which gives them a particular value to SoftwareOne that cannot be readily estimated and may not be adequately compensated for in monetary damages alone. Accordingly, in additional to all other remedies available at law or in equity, SoftwareOne will be entitled injunctive or equitable relief if Company breaches this Agreement.
The Services may be subject to the export control regulations of the U.S., Switzerland and the European Union. Company shall not use the Services or otherwise transfer, export or them or access thereto to countries against which the United States, Switzerland, or the European Union maintains an embargo (collectively, “Embargoed Countries”), or to or by a national or resident thereof, or any person or entity on a list of specially designated nationals (collectively, “Designated Nationals”). The lists of Embargoed Countries and Designated Nationals are subject to change without notice. Company hereby represents and warrants that it is not located in, under the control of, or are a national or resident of an Embargoed Country; that its Users are not Designated Nationals; and that it shall comply strictly with all U.S., Swiss, and European Union export laws, and assume sole responsibility for obtaining licenses to export or re-export as may be required.
There are no third party beneficiaries to this Agreement. Company shall not assign this Agreement without SoftwareOne’s prior written consent. This Agreement, together with the Contract and any other agreements for additional services accepted within the Interface, represent the entire agreement of the parties regarding the subject matter hereof. SoftwareOne’s failure to enforce any provision of this Agreement will not act as a waiver to enforce the same or any other provision in the future. SoftwareOne may provide Company with notices under this Agreement by delivering them to the electronic mail address listed within the interface.
FinOps for Cloud is SoftwareOne's cloud management tool offering comprehensive insights into your cloud infrastructure.
If you have previously used SoftwareOne's Cloud Spend Management for managing your cloud expenses, this topic will help you understand the key differences between FinOps for Cloud and Cloud Spend Management.
Consolidated consumption
Costs are displayed on a chart (bar or linear) with details placed in a table. See .
Different chart types (such as bar, linear, area, horizontal bar, and pie) and tables (table, summary table) are used to display costs. See .
Legacy data
Access to Archived recommendations.
Access to Realised and Unrealised recommendations.
Document collaboration
Not supported
Store and share large files conveniently.
Notification service
Portal only, email and/or SMS
Name
Amazon Web Services
Supported
Supported (currently unavailable)
Google Cloud Platform
Supported
Not supported
Microsoft 365
Not supported
Supported
Microsoft Azure
Supported
Supported
Name
Resource allocation
Allocate resources by name, ID, tags, data source, resource type, and region.
Allocate resources by tags or virtual tags.
Name
Customizable dashboards
Not supported
Configuration of tiles to represent data.
Cost drill-down
Ability to filter data using categories (such as service, region, resource type, data source, owner, pool, and more) and periods (daily, weekly, or monthly). See Resources.
Ability to filter data using categories (such as platform type, provider, tenant, subscription, custom group, provider, resource name, tag, and more) and periods (half-year, monthly). See Reports.
Detailed reports
Not supported
Name
High level overview
Main data overview contains information like total possible monthly savings, check time log, savings with commitments and savings on storage.
Overview of savings breakdown by Strategy, Total Predicted Cost, and Total Predicted Savings for 1 or 3 years.
Recommendations filtering
Based on categories (such as Savings, Security, or Critical) and applicable cloud provider services.
Based on categories (such as Cost Optimization, Operational Excellence, or Security) and applicable cloud provider services.
Recommendation options
Information with short description, assigned category, affected cloud providers, affected resources, potential savings (in total and per each resource), actions (download report, settings, exclude pools, pin) and settings (each recommendation has its own conditions that can be updated during every auto check).
Name
New tags setup
Tagging policy must specify if tag is required, prohibited, or if there's a correlation.
Resources affected by the policy are chosen based on filters, such as suggested filters, data source, pool, region, service, resource type, resource state, with recommendations, with violated constraints, paid network traffic from/to.
Allows you to manage and create tags. You can also specify the rule, name, add a new tag, or group as a new tag.
You can also select an existing tag or create a new tag if it doesn't exist. Additionally, you can filter resources based on criteria, such as resource type, region, service, and more.
Additional options include 'With recommendations', 'With violated constraints', and 'Paid network traffic from/to'. Resources are displayed in a table containing columns, such as Resource Name, Data Source, Pool, Region, Service Name, Resource Type, Resource State, and Software Asset.
Virtual tags
Not supported
Supported
Uploading tags to cloud provider
Not supported
Name
Cloud budget manager
Tabular view when creating a new quota or budget policy is possible. Each policy allows you to review resources grouped by configured filters.
Configurable views to display Consumption and Utilization grouped by Custom Groups or Provider.
New budget setup
Budget policy must contain the type, such as resource quota, recurring budget, or expiring budget.
Resources affected by the policy are chosen based on filters, such as suggested filters, data source, pool, region, service, resource type, resource state, with recommendations, with violated constraints, tags, and paid network traffic from/to.
Allows you to set up a budget by specifying the parent group name, name, total amount in USD, start date, end date, and owner email address.
Resources affected by the budget are chosen based on filters such as suggested filters, data source, pool, region, service, resource type, resource state, with recommendations, with violated constraints, tags, paid network traffic from/to.
Name
Chargebacks
Chargebacks
Not supported
Allows you to distribute cloud spend to the relevant business units and cost centers across your organization.
You can select the account for which you want to add chargebacks by specifying details such as date, amount, and reason, and add multiple chargebacks. The form includes a table listing of your existing chargebacks.
Name
New anomaly detection setup
The anomaly detection policy must specify the type, such as Resource Count or Expenses.
Resources affected by the policy are chosen based on filters such as suggested filters, data source, pool, region, service, resource type, resource state, with recommendations, with violated constraints, tags, paid network traffic from/to.
Three types of cloud consumption alerts are supported, including Spike Alerts, Overage Alerts, or Reserved Instance Utilization.
Spike alerting identifies usage anomalies in Azure or AWS environments. Overage alerting notifies you if consumption exceeds defined values. Reserved Instance alerting monitors the utilization of reservation purchases.
Manage anomaly detection
List of all implemented policies with their names, visualization of the status, short description and applied filters.
List of implemented alerts with their names, type, visibility, last run, along with the most important columns to quickly grasp the context of the definition.
Anomaly detection details
Detailed information about the policy together with detailed history showing all historical violations.
Name
N/A
List of historical events
General list of events with simple filtering by All, Info, Warning, Error.
You can also check event details, such as exact date, object name, object type, and short description.
Not supported (Audit trail redirects to Marketplace)
Name
N/A
Roles and permissions
Supports four types of permissions, including Organization Manager, Manager, Engineer, and Member.
User management (Moved to Marketplace in v2)
Name
Multi-organization approach
A user can be a part of different organizations and can switch between them using the Organization menu.
Name
Alerting
Reporting
Supported
Supported
Alerts
Supported
Supported
Notification settings
The Organization Manager can change notification settings.
Notifications can be enabled or disabled from these modules: FinOps, Policy Alerts, Recommendations, System notifications, and Account management.
Reports can be customized to focus on specific metrics or time periods. They can also be downloaded, emailed, or published to SFTP.
Shows Cost Optimization Strategy with predicted savings in the chosen currency or as percentage. Also includes a description of the purpose of chosen change.
Manage tags in manual or automated Resource rules based on resource properties, option to write tags back to vendor.
The preview section is a graphical representation of the alert, highlighting the time at which it occurs. You can interact with this chart, which includes 'hover-over text' when viewing a vertical bar in the chart.
A user can be a part of different organizations with different role and can switch between them.
Supports individual notifications with an option to share the notifications with other users.

The Anomaly detection page displays all resource count and expense anomaly policies you have created. You can get detailed information for a policy by selecting the policy name. This includes general information, the date of violation, status, average, and actual counts.
From the policy details page, you can edit the policy name. You can also delete the policy, download the chart as a PNG file, and view the violation history.
To rename an existing anomaly detection policy:
Navigate to the Anomaly detection page.
In the list of policies, select the policy you want to rename.
On the policy details page, select the edit icon .
Under Name, enter the new name, then save your changes.
Deleted policies cannot be restored.
To delete an existing anomaly detection policy:
Navigate to the Anomaly detection page.
In the list of policies, select the policy you want to delete.
On the policy details page, select Delete.
In the confirmation panel, select Delete to confirm the action.

You can download a complete list of discovered cloud resources for analysis, reports, or integration with external tools.
The downloaded file includes metadata such as resource type, cost, usage, tags, ownership, and more.
To download a list of resources:
From the sidebar, navigate to the Resources page.
(Optional) Select the data range and apply filters as needed.
Select Download. The Download option appears above the table that lists all cloud resources. You might need to scroll down to see it.
Choose either XLSX spreadsheet or JSON file to start the download.
If the data is too large, the FinOps platform shows a message. To continue, modify the filters to reduce the amount of data, and then try downloading again.
Users who have been inactive for more than 90 days are considered obsolete and subject to deletion. This is due to the security risks they pose for the organization, as they can be compromised and become access points for malicious users.
The number of days is a custom parameter. Use Settings to change it. You can also download a list of inactive users as JSON or XLSX by selecting the download icon .
Security check that browses through the resources to find network vulnerabilities and provides a list of instances liable to RDP/SSH hacking. The following are the insecure ports and permissions:
port tcp/22
port tcp/3389
all inbound traffic
with one of:
CidrIp: 0.0.0.0/0
CidrIpv6: ::/0
AWS
Describe regions: ec2.describe_regions()
Describe instances: ec2.describe_instances()
Describe security groups: ec2.describe_security_groups()
Azure
Describe instances: compute.virtual_machines.list_all()
Describe security groups: network.network_security_groups.list_all()
You can download the list of insecure Security Groups as JSON for subsequent automated processing.
The active IAM users that have console access turned on, but have not used it for more than 90 days are in the list. Consider revoking console access to increase security.
Note that the number of days is a custom parameter. Use Settings to change it.
The S3 buckets in the list are public. Ensure that the buckets use the correct policies and are not publicly accessible unless explicitly required.

To view recommendations:
Navigate to the Recommendations page from the sidebar.
(Optional) Choose the billing data source for which you want to view recommendations. You can select multiple sources at once. For information on the supported sources and how to add them, see .
(Optional) Choose a category. The default setting is All, meaning all recommendations are displayed, but you can filter by Savings, Security, Critical, and Non-empty to display the recommendations you want to see.
(Optional) Select the applicable service from the list. You can select multiple services at once.
(Optional) Choose if you want to view your recommendations in the form of cards or tables.
Review the suggested optimizations and their projected savings.
Select a recommendation to open a summary page.
Recommendations are archived when they are no longer active, either because they have been applied, the associated resource has been removed, or they have become irrelevant due to changes in resource properties.
To view your archived recommendations:
On the Recommendations page, select Archive.
On the Archived recommendations page:
(Optional) Use the date selector to use a custom date range, or select any of these options:
This month - Displays archived recommendations from the current month.
Last 7 days - Displays archived recommendations from seven days ago until now.
Last 30 days - Displays archived recommendations from 30 days ago until now.
Select the recommendation to view details, such as the data and time when the recommendation was detected, the resource to which the recommendation applies, and more.
