Insights are automated, pre-built checks that evaluate your cloud resources against established best practices. Unlike policies, which you define yourself, insights are maintained by Troposphere and updated as provider recommendations evolve.

Categories

Each insight belongs to one of four categories:

  • Security – identifies risks such as public access, missing encryption at rest, or open network ports.
  • Cost – flags spending patterns that may indicate inefficient or unexpected resource usage.
  • Reliability – highlights resilience and availability concerns in resource configuration.
  • Best Practice – catches hygiene issues such as missing tags, outdated resource types, or non-standard naming.

Insight Results

When an insight runs against a resource, it produces one of four results:

  • Pass – the resource meets the recommendation.
  • Fail – the resource does not meet the recommendation and should be reviewed.
  • Error – the check could not be completed, usually due to insufficient permissions.
  • Not Applicable – the check does not apply to this resource type or configuration.

Remediation

Each failing insight includes remediation steps that describe what to change and why. These steps are provider-specific, giving you actionable guidance you can apply directly in your cloud console or infrastructure code.