Marshal
PricingTry with my AWS
Back to Marshal
Fictional exampleAcme Orders · AWS · 25 August 2026

Idle staging server needs attention.

Marshal connected one infrastructure change to its cost, exposure, utilization, and customer impact-then prepared one bounded decision. This page shows the evidence and guardrails a real brief should expose.

Decision

Review before Friday

No automatic change scheduled

01

What Marshal found

staging-worker-03 looks temporary, but it is still running and exposed to the internet.

The server appeared three days ago after a staging deploy. It averages 2% CPU, has no observed production dependency, and is projected to add $74 this month. No customer-facing outage was detected in the same window.

Change

Added 3 days ago

Created by deploy-role in us-east-1

Cost

+$74 projected

Estimate from the current AWS rate and runtime

Security

Public access on

Public IP and SSH open to the internet

Customer impact

None detected

No production dependency or monitor outage found

02

The proposed action

Awaiting human approval

Stop staging-worker-03.

Stop the verified-idle EC2 instance. Its EBS disks survive and Marshal can start it again. This removes the runtime cost, but the open security group remains a separate finding until you restrict it.

Risk
Medium · service interruption
Rollback
Supported · start it again
Cost effect
About $74/month avoided
Approve is disabled in this public exampleDismiss or investigate further are also available in-product
03

What happens after approval

  1. Recheck

    Confirm the resource and preconditions still match the reviewed plan.

  2. Execute

    Run the deterministic, allowlisted provider action-not generated shell code.

  3. Verify

    Read the provider state back and keep the issue open until it is confirmed.

Expected proof: AWS reports instance i-0a7c3e91 stopped; the action log records approver, executor, result, and time. The separate public-SSH finding stays open rather than being falsely closed. This is an expected outcome, not a claim that this fictional action ran.

Evidence coverage

A recommendation is only as current as its slowest relevant source.

AWS inventory

Current

EC2 state, type, and network path

9 min ago

CloudTrail

Current

RunInstances event and actor

6 min ago

CloudWatch

Current

CPU and connection utilization

12 min ago

AWS billing

Delayed

Cost Explorer projection; export pending

19 hr ago

What is still unknown

The detailed billing export has not arrived, so $74 is a provider-rate projection-not bill-backed realized savings. Marshal should keep that distinction visible.

See this loop with your evidence.

Start read-only. Marshal will show what each source has reported, what is missing, and what deserves the first decision. No credit card required.

Connect read-only
Review security & trustSee plans