One read-only script. Run it where your AWS credentials already are. The page adds a plan line for each check that found waste. Direct Skill does not keep a key. Once a week the page asks you to run it again.