Point CloudArq at your AWS for one read-only scan across security, cost, and compliance. Every finding ships the exact fix (CLI, Terraform, CloudFormation), plus an AI assistant you can ask about any finding. Nothing stored, EU-hosted. Free under 50 resources.