Free AWS tools
39 tools to fix an AWS error, calculate limits and costs, convert and build what AWS expects, and look things up. Each one runs entirely in your browser: nothing you paste is uploaded, and once a page has loaded, most keep working offline.
- Every tool is JavaScript on its page, not a server: what you paste - error messages, your ~/.aws/config, access key IDs, JSON - stays on your computer.
- Nothing you enter is uploaded, processed on a server or stored. Check it in your browser's developer tools (Network tab).
- Once a tool's page has loaded, it works without an internet connection. The exceptions are the IAM Permissions Finder and the IP Address Lookup, which download AWS's public permission and IP range files as you use them.
Fix an error
Paste what AWS told you and get the cause and the fix.
AWS Access Key ID Decoder
Decode an AWS access key ID to its account number and key type, and fix credential errors such as an invalid or expired security token.
AWS VPC Connectivity Troubleshooter
Find what a Lambda function, Fargate task or EC2 instance needs to reach the internet, S3, ECR or AWS services, and fix VPC timeouts and errors.
AWS IAM Access Denied Decoder
Paste an AWS access denied error: see who was denied which action on which resource, which policy type denied it - explicitly or implicitly - and what to check.
AWS Credentials Chain Troubleshooter
Paste your ~/.aws/config and choose the AWS CLI, an SDK or Terraform: see the credential provider chain it follows, where your profile gets its credentials and what breaks it.
Amazon Bedrock AgentCore Error Decoder
Paste an Amazon Bedrock AgentCore error: see why an agent runtime, gateway or auth call failed and what to check, or paste a JWT to see what the authorizer checks.
Amazon SageMaker Endpoint Error Decoder
Paste a SageMaker endpoint FailureReason or invocation error - ping health check, model download, CannotStartContainerError, capacity, quota - and get its causes and the command to check each.
Amazon Cognito JWT Inspector
Paste an Amazon Cognito ID or access token and see its claims explained and why an API rejects it - expired, an ID token instead of an access token, another user pool or app client.
AWS SigV4 & Presigned URL Debugger
Paste an S3 presigned URL or a SignatureDoesNotMatch error and see its Region, service, credential scope, signed headers and expiry, and why AWS rejects the signature.
AWS Lambda Error Decoder
Paste a Lambda error or log line - Task timed out, Runtime.ImportModuleError, out of memory, Runtime.HandlerNotFound - and get its causes and fixes for your runtime.
Calculate
Limits, capacity and cost from AWS's own numbers.
DynamoDB Item Size and RCU/WCU Calculator
Calculate an item's size and the RCU and WCU each read and write of it consumes, and the requests per second a table's capacity handles.
DynamoDB Pricing and Capacity Calculator
Estimate a table's monthly cost and the RCU and WCU to provision, on-demand and provisioned side by side.
AWS VPC Subnet Calculator
See how many usable IPs a /24, /16 or /28 has in AWS, and split a VPC CIDR block into subnets across Availability Zones.
Amazon Bedrock Throttling Calculator
Choose a Bedrock model and your requests: see the requests per minute and at once its quotas allow, what to change, and why you get a 429 ThrottlingException at low traffic.
Amazon Bedrock AgentCore Limits Checker
Describe your agent and see which Amazon Bedrock AgentCore limits it will hit - request timeouts, session lifetime, 2 vCPU/8 GB, payload sizes - and what a Runtime session costs in CPU and memory.
Amazon Bedrock Billing Decoder
Paste Amazon Bedrock usage types, a Cost Explorer CSV or Cost and Usage Report rows and see the model, token type, service tier and routing behind each line, the spend per model, and why the bill does not add up.
Amazon Bedrock Pricing Calculator
Price an Amazon Bedrock workload every way AWS sells inference - Standard, Priority and Flex tiers, batch, Global routing, prompt caching and the Reserved tier - for any model, Claude included, cheapest first.
Amazon Bedrock Fine-Tuning Cost Calculator
Add up what fine-tuning a model on Amazon Bedrock costs - training per token and epoch, monthly storage, and serving it on Provisioned Throughput or on demand - for Nova, Llama and Claude 3 Haiku.
Amazon SageMaker GPU Instance Calculator
Find the ml.* GPU instances that fit your LLM on a SageMaker endpoint or training job - weights, KV cache and optimizer states - with the hourly price and the quota code to request.
Amazon SageMaker Inference Cost Calculator
Compare what a workload costs a month on a SageMaker real-time, serverless or asynchronous endpoint or in batch transform jobs, and the request volume where each gets cheaper.
EKS Max Pods Calculator
Calculate how many pods an Amazon EKS node runs per EC2 instance type and VPC CNI mode, its allocatable CPU and memory, and ECS awsvpc tasks per instance.
RDS Max Connections Calculator
Find the default max_connections of an Amazon RDS or Aurora DB instance class per engine, and check whether Lambda, pods and RDS Proxy fit in it.
Convert & build
Turn what you have into what AWS expects, with the code.
DynamoDB JSON to JSON Converter
Unmarshall DynamoDB JSON to plain JSON and marshall JSON back to DynamoDB JSON, and get the code to write the items.
AWS Cron Expression Validator
Validate and parse EventBridge cron, rate and at expressions, calculate the next run times and translate Unix cron to AWS cron.
DynamoDB Expression Builder
Build DynamoDB key condition, filter, condition and update expressions with attribute name and value placeholders, and get the AWS CLI, JavaScript and Python code.
DynamoDB TTL and AWS Timestamp Converter
Convert AWS epoch timestamps in seconds or milliseconds to dates and back, and catch TTL values that never expire.
AWS CORS Configuration Generator
Fix CORS errors on AWS and generate the CORS configuration for S3, API Gateway, Lambda function URLs and CloudFront.
SQL Date Format Converter
Get the date_parse, TO_TIMESTAMP and to_timestamp expressions that read a date or timestamp in Athena, Redshift and Glue, and fix date errors.
Amazon Bedrock AgentCore Dockerfile Checker
Paste a Dockerfile and check it against the Amazon Bedrock AgentCore Runtime container contract: ARM64, host 0.0.0.0, the port of its protocol, a numeric USER and the 53-layer limit.
Amazon Bedrock AgentCore Gateway Target Configurator
Pick an Amazon Bedrock AgentCore Gateway target - Lambda, API Gateway, OpenAPI, Smithy, MCP server or Runtime - and see the outbound auth it takes, its credential provider, the create-gateway-target command and the service role policy.
Amazon Bedrock AgentCore Token Flow Planner
Plan how Claude, Claude Code, VS Code, Cursor or your own code gets a token Amazon Bedrock AgentCore Gateway or Runtime accepts - with Cognito, Okta, Entra ID, Auth0 or IAM: the authorizer, redirect URIs and client settings.
Amazon Bedrock AgentCore IaC Security Checker
Paste a CloudFormation template or Terraform and check its Amazon Bedrock AgentCore resources before you deploy - gateways without authorization, secrets in the template, PUBLIC network modes, JWT authorizers and execution roles.
Amazon Bedrock InvokeModel Body Generator and Validator
Get the InvokeModel request body and the Converse request for any Amazon Bedrock model, check a pasted body against the format the model takes, and see what a Malformed input request ValidationException means.
Amazon Bedrock Batch Inference JSONL Validator
Check an Amazon Bedrock batch inference job before it runs - every JSONL record against the body the model takes, record counts and file sizes against the quotas, the S3 layout and the job settings - and see why a job failed.
Amazon Bedrock Knowledge Bases Configurator and Validator
Set up an Amazon Bedrock knowledge base vector store - the embedding model dimensions, the OpenSearch, Aurora or S3 Vectors index, the service role policies and the limits your data hits - and compare what each store costs idle.
AI Coding Tools on Amazon Bedrock Configurator
Set up Claude Code, Cline, Cursor or OpenAI Codex on Amazon Bedrock - the settings, the inference profile ID for your Region, a least-privilege IAM policy and a quota check for your sessions - or paste the error the tool shows.
Look up
Find IDs, permissions, IP ranges and models.
AWS IAM Permissions Finder
Find the IAM actions an AWS CLI command or SDK call needs, get a least-privilege policy, and see why an AccessDenied error happened.
AWS IP Address Lookup
Check if an IP address belongs to AWS and find its Region, service and network border group, or list AWS IP ranges by service and Region.
Amazon Bedrock Model Finder
Find the Amazon Bedrock models available in an AWS Region, the model or inference profile ID to call, the IAM policy and code for the call, where cross-Region profiles run, lifecycle dates, and what a Bedrock error means.
Amazon SageMaker Quota Finder
Pick a SageMaker endpoint, training or processing job, HyperPod cluster, notebook or Studio space and get every quota it counts against - code, default and the value to request.