plain english infra

Your cloud infrastructure is talking. plainfra translates.

Connect your AWS account and plainfra explains what's actually happening — cost, security, reliability, change — in plain English.

Built by Tim Fraser, Cloud Ops Lead at Triont, after 30 years in Linux, hosting, and infrastructure operations.

rocket_launch Start Free Trial description See Sample Report event_available Book a Call

description

Weekly health report Thornwick Logistics · sample

plain english infra

Executive summary

Weekly operations brief

5 AWS accounts · week of 4 May 2026 · sample data

Status: RED

Three owner actions need attention. Cost drift is explainable, one public database rule is still open, and EKS 1.32 has moved into extended support.

Cost $17,920/mo +$386 wk/wk

Security 1 public DB rule

Resolved ACM cert renewed

AMBER Cost

NAT Gateway data processing is up $386 week-on-week. nat-0f41a9e2 now carries the nightly export, with no AWS Budget alert.

RED Security

Production PostgreSQL is publicly reachable. sg-0a4f2c1d allows 0.0.0.0/0 on port 5432, open since 22 April.

AMBER Reliability

SQS DLQ backlog is growing. orders-dead-letter has 1,184 messages, oldest 38 hours, and no CloudWatch alarm.

AMBER EOL

EKS prod-orders is on 1.32. Standard support ended 23 March 2026, so extended support billing now applies.

Changed since last report

ACM certificate for api.thornwick.example renewed from 9 days to 397 days. Two idle dev EC2 instances stopped.

Next action

Remove the public database rule first, then schedule the EKS 1.33 upgrade before the next fortnightly release window.

What plainfra Finds

Most first scans surface the same patterns: forgotten resources, open access, missing alarms, expiring certificates, and cost changes nobody has explained yet.

savings

Orphaned Resources

Idle load balancers, detached EBS volumes, unused Elastic IPs: infrastructure you're paying for but nobody is using.

shield

Security Gaps

Overly permissive security groups, public S3 buckets, missing MFA on root accounts, and expiring certificates before they become incidents.

tune

Right-Sizing Opportunities

Over-provisioned RDS instances, EC2s running at 5% CPU, NAT Gateway traffic patterns that suggest cheaper alternatives.

label_off

Tagging Gaps

Resources missing cost-allocation tags, inconsistent naming conventions, and untagged infrastructure that makes cost attribution impossible.

monitoring

Reliability Risks

Single-AZ databases, missing backups, CloudWatch alarms that should exist but don't, auto-scaling groups without health checks.

event_upcoming

Lifecycle & EOL Checks

Reports can be customised to your area of interest: RDS and Aurora engine versions nearing EOL, EKS versions before support ends, Lambda runtimes due for deprecation, and ElastiCache, OpenSearch, and ACM certificate checks.

query_stats

Cross-Service Correlation

plainfra queries CloudWatch, Config, Cost Explorer, and IAM simultaneously, connecting patterns across services you'd never script by hand.

Open the production sample report →

plainfra capabilities

Everything you need to run AWS with confidence

analytics

Scheduled Health Reports

plainfra runs a full discovery of your AWS account on your schedule: weekly, monthly, or on demand. Each report compares against the previous scan, so you see exactly what changed: new risks, resolved issues, and drift over time. Delivered as a PDF to your inbox.

description Weekly health report — Thornwick Logistics

Status: RED

RED production · public RDS port 5432 open

AMBER cost · ALB spend $386 wk/wk increase

GREEN resolved · ACM cert renewed (9d → 397d)

Open sample report

forum

Ask plainfra, Get Answers

Ask questions like "why did our bill go up?", "are any buckets public?", or "what changed since last week?" plainfra queries AWS APIs and returns resource IDs, dollar amounts, and next actions.

"Analyze Lambda cold starts"

savings

Cost & Tagging Hygiene

Find idle load balancers, detached volumes, unused IPs, missing cost tags, and resources nobody owns.

confirmation_number

Findings Become Tickets

Turn findings into Jira or GitHub issues so risks do not stay trapped in reports, chat threads, or someone's memory.

Early demo feedback

What early users noticed first

format_quote

"I lead the engineering org, not the infrastructure. plainfra gives me a prioritised operational picture before standup."

format_quote

"plainfra identified ~$650/month in orphaned load-balancer spend within the first scan. Forty idle load balancers."

format_quote

"Six engineers, zero dedicated ops capacity. plainfra gives us operational maturity we couldn't staff for."

New article

MVSP: The 25-Point Security Baseline Your Customers Are Starting to Ask About

A vendor-neutral, one-page security checklist maintained by Google, Salesforce and Okta. Nine of its 25 controls map directly to AWS, and plainfra's weekly scan already covers them.

Read article →