Opportunity Name:
Delete Idle AWS Transfer Servers
AWS Resource Type:
AWS Transfer Family
Opportunity Description
AWS Transfer Family servers enable managed SFTP, FTPS, and FTP file transfers to Amazon S3 and EFS. These servers incur hourly charges even when inactive. Often deployed for short-term use cases, many remain active without ongoing need, leading to avoidable costs and potential security risks.
This Finder identifies idle AWS Transfer Family servers by analyzing key CloudWatch metrics over a configurable inactivity period (defaulting to 30 days). Servers with no meaningful activity are flagged for deletion.
Criteria for Identifying the Opportunity
The Finder applies the following rules:
-
Metrics Monitored:
BytesIn
BytesOut
FilesIn
FilesOut
OnUploadExecutionsStarted
-
Inactivity Threshold:
Sum of all above metrics over the configured period must be zero.
-
CloudFix CUR Filtering:
CUR identifies servers whose annualized cost exceeds the account's configurable resource cost threshold (defaulting to $100) and whose annualized data-load usage is near zero.
-
Configurability:
Default inactivity period is 30 days, configurable by the user.
Potential Savings (if known)
Idle AWS Transfer Family servers accrue hourly charges. By deleting unused servers, users can save nearly 100% of those costs. Servers whose annualized cost exceeds the account's configurable resource cost threshold (defaulting to $100) are prioritized, ensuring meaningful savings per recommendation.
What Happens When the Fixer is Executed?
This is a Finder-only opportunity. CloudFix does not delete servers automatically. Instead, it provides a detailed report identifying the idle server, its recent CloudWatch activity, and the projected annual savings from deleting it.
Avoiding deletion of any S3 or EFS data associated with the server, and removing the server itself, remain manual steps performed by you in the AWS Console or via your own automation.
Is It Possible to Roll Back Once CloudFix Implements the Fixer?
Not applicable. CloudFix does not take automated action. Once a server is deleted, it cannot be restored -- there is no mechanism to recover the server configuration, so deletion should be carefully reviewed before you perform it manually.
Can CloudFix Implement the Fix Automatically Once I Accept the Recommendation?
No. This Finder generates actionable recommendations only; no automated Fixer is implemented for this opportunity. You must manually delete the server through the AWS Console, CLI, or your own automation.
Does the Fix Require Downtime?
No downtime is required for your active workloads. However, any clients configured to use the deleted Transfer Family server will fail to connect once it is removed.
Bill Gleeson
Comments