huaweicloud-cost-optimizer

• Periodic cleanup of idle EIPs to reduce holding costs
• Cost analysis and optimization recommendations
• Multi-region unified management
• Automated monitoring and alerting for idle resources
• Operation audit logging for compliance

• "Help me identify idle EIPs and generate an optimization report"
• "Generate an EIP cost analysis report to identify high-cost resources"
• "Set up idle EIP monitoring with automatic alerts via webhook or email"
• "View EIP distribution and status summary across all regions"
• "Show audit logs for EIP operations in the last 30 days"
• "List all EIPs in cn-north-4 with detailed information"

• hcloud CLI (KooCLI) v7.0+ — Huawei Cloud command-line tool
• jq — JSON processor for parsing API responses
• bc — Arbitrary precision calculator for cost estimation
• curl — HTTP client for webhook notifications

undefined

export HW_ACCESS_KEY=<your-ak>
export HW_SECRET_KEY=<your-sk>
export HW_REGION_NAME=cn-north-4

Note: If you have already configured

hcloud configure

interactively (entering credentials via prompts, not command-line arguments), the skill will also detect and use those credentials.

HW_ACCESS_KEY

HW_SECRET_KEY

HW_REGION_NAME

cn-north-4

HW_SECURITY_TOKEN

• Never commit credentials to version control
• Never expose AK/SK values in code, conversation, or commands
• Never pass AK/SK values as command-line arguments (exposes credentials in shell history and

  ps aux

  )
• Use IAM users with minimal required permissions
• Enable MFA for sensitive operations
• Rotate AK/SK regularly
• Use

  ./scripts/check_env.sh

  to validate credentials before running scripts

1. Environment Check → Verify hcloud CLI, jq, credentials
2. EIP Query → List EIPs across regions via hcloud CLI
3. Idle Analysis → Identify unbound EIPs exceeding idle threshold
4. Cost Report → Generate HTML/JSON cost analysis report
5. Monitoring Setup → Configure idle EIP alerts (webhook/email)
6. Audit Logging → Record operations for compliance

scripts/eip_cost_report.sh

• Summary statistics (total EIPs, idle, active, total bandwidth, costs)
• Per-EIP detail table with cost estimates
• Available in text, HTML, and JSON formats

1. Use Shell Scripts EXCLUSIVELY: All scripts are Shell + hcloud CLI. No Python SDK dependency.
2. Regular Monitoring: Set up daily cron jobs with

   monitor_idle_eips.sh --setup-cron

   to catch idle EIPs early
3. Cost Reports: Generate weekly cost reports with

   eip_cost_report.sh --format html

   to track optimization progress
4. Audit Logging: Enable audit logging for all EIP operations using

   eip_audit_log.sh

5. Multi-Region List:

   list_eips.sh

   supports comma-separated regions

   --region cn-north-4,cn-east-3

   for cross-region listing. Note:

   analyze_idle_eips.sh

   ,

   eip_cost_report.sh

   , and

   monitor_idle_eips.sh

   process a single region each (run once per region for multi-region analysis).
6. Webhook Alerts: Configure webhooks for real-time idle EIP notifications
7. Environment Validation: Always run

   check_env.sh

   first to verify hcloud CLI and dependencies
8. Idle Days Consistency: Both

   analyze_idle_eips.sh

   and

   monitor_idle_eips.sh

   use

   --idle-days

   parameter with consistent timezone handling

• Cost estimates are for reference only — based on cn-north-4 on-demand pricing (bandwidth model: ~3 CNY/Mbps/month + 0.02 CNY/hr IP retain fee). Actual costs may vary by region and billing mode.
• API does not return charge_mode — scripts cannot distinguish bandwidth vs traffic billing; all estimates use bandwidth model.
• This skill is READ-ONLY — it analyzes and reports idle EIPs but does NOT release or delete any resources. Manual action in the console is required to release EIPs.
• EIP release is irreversible — if you choose to release idle EIPs based on the analysis report, the public IP address will be reclaimed and cannot be recovered.
• AK/SK must never be hardcoded — credentials should only be obtained via environment variables (

  HW_ACCESS_KEY

  ,

  HW_SECRET_KEY

  ) or

  hcloud configure

  interactive mode (entering via prompts, not command-line arguments).
• hcloud CLI is the only supported method — all scripts use hcloud CLI (KooCLI) natively.
• Authentication: Use environment variables (

  HW_ACCESS_KEY

  ,

  HW_SECRET_KEY

  ) as the primary method. If

  hcloud configure

  is already set up interactively, the skill will detect and use those credentials. Never pass credentials as command-line arguments.
• Temporary Credentials Supported: This skill supports temporary AK/SK+Token obtained via IAM STS. Set

  HW_SECURITY_TOKEN

  when using temporary credentials.
• Environment Variable Standard: Uses

  HW_*

  prefix for consistency with other Huawei Cloud skills.
• jq is required for all scripts that parse hcloud CLI JSON output.
• Idle days calculation is timezone-consistent — both analyze and monitor scripts use

  date

  command for epoch calculation, eliminating UTC offset issues.
• Audit log timestamps are timezone-aware — format

  YYYY-MM-DDTHH:MM:SS+HH:MM

  (e.g.,

  +08:00

  ), not misleading

  Z

  suffix.