Skip to main content

Flexsave for Amazon Web Services

DoiT Flexsave™ enables simplified, automated management of on-demand Amazon Web Services (AWS) compute workloads for cost and agility. It encompasses savings across all of the supported AWS services, which you can check in the capabilities section.

Flexsave helps you save money on your AWS compute costs without having to commit to Reserved Instances (RIs) or Savings Plans (SPs), by automatically covering your on-demand workloads with Reserved Instances and Savings Plans from DoiT's own inventory.

Here are some of the benefits of using Flexsave:

  • Generate savings off on-demand, without the commitment
  • Automate your commitment management
  • Use on-demand compute with optimized pricing

Flexsave AWS landing

Services report charts​

If you're using Flexsave with Amazon Compute (EC2, ECS, Lambda, EKS), Amazon SageMaker, or Amazon RDS, you'll see a report chart for each of them in Flexsave AWS under Savings in DoiT Console.

Each service tile contains the monthly savings and the life time value of savings to date. If you click Explore your savings for a specific service, you'll see its report chart, which is further down in the page.

The report chart for a specific service shows:

  • The Flexsave eligible covered, which is what we cover for you
  • The Flexsave eligible uncovered, which is what decide not to cover, since we need to leave some room for fluctuation in usage
  • The Flexsave eligible customer covered, which is what we could cover but is already covered by your Savings Plans (SPs) or Reserved Instances (RIs)

To access the full report, click the title of the chart and you'll be redirected to that specific report's page in Reports under Analytics. There, you can modify the report if you need to.

Flexsave for Amazon SageMaker

Account types​

To better understand how your business can benefit from Flexsave, you first need to know your account type.

  • Resold account: A resold account is paid by a DoiT reseller payer account. There are two sub types:

    • Consolidated resold account: Your account is a member of one of the three DoiT consolidated billing accounts (payer account ID 561602220360, 017920819041, or 279843869311).

    • Dedicated resold account: Your account is on a DoiT reseller payer account other than the three consolidated accounts listed above.

  • SaaS account: A SaaS account isn't paid by a DoiT reseller payer account. Your account is of this type if your organization isn't paying for cloud access via DoiT.

Capabilities​

Flexsave monitors the usage of your on-demand resources and adjusts the mix of discount mechanisms to maximize your potential savings. Depending on you account type, you get different Flexsave capabilities.

Consolidated resold account​

  • Supported regions: all available regions

  • Supported services: Amazon EC2

  • Supported operating systems: Linux, Windows (including Microsoft SQL Server)

Services not listed above are not eligible for Flexsave, including AWS Fargate, AWS Lambda, VMware Cloud on AWS, Amazon ElastiCache, Amazon RDS, and Amazon SageMaker.

Dedicated resold and SaaS account​

Services not listed above are not eligible for Flexsave, including VMware Cloud on AWS, Amazon ElastiCache, Amazon RedShift, and Amazon OpenSearch.

EC2 Instance eligibility​

  • If you have a consolidated resold account, Flexsave allocates capacity for the current month based on utilization during the last 7 days of the previous month. Instances that run for ~90% during that period qualify for Flexsave discount.

  • If you have a dedicated resold or a SaaS account, to meet the qualification criteria, you must maintain a spend across Supported SKUs of at least US$0.8 per hour over the past 7 days.

DoiT Flexsave accounts​

DoiT Flexsave accounts are created and owned by DoiT. They contain no workloads but only Savings Plans or Reserved Instances.

DoiT Flexsave optimizes your savings by adjusting the blend of plans available to you. If you're on a dedicated resold or a SaaS account, you'll see Flexsave accounts join or leave your AWS Organization whenever your plans are adjusted.

Identify Flexsave accounts​

DoiT Flexsave accounts have account names as fsXXXXX in the AWS Console.

In DoiT Cloud Analytics reports, all the Flexsave accounts added to your AWS organization are aggregated into one single item under the Project/Account name Flexsave. See Flexsave projects/accounts for an example.

Flexsave accounts activities​

DoiT Flexsave accounts join or leave your AWS Organization via actions from the DoiT management role.

When a DoiT Flexsave account leaves your Organization, we clean up the account and delete all the related resources (including default VPCs, roles, policies, security tools, etc.) to ensure the best security posture. The cleanup process may trigger security warnings, for example, AWS CloudTrail logs deleted, AWS GuardDuty detector deleted, or a DeleteServiceLinkedRole request sent. As long as they are from a DoiT Flexsave account, they are not suspicious activities.

AWS Service Control Policies​

Flexsave is compatible with AWS Service Control Policies (SCPs).

If you're on a dedicated resold or a SaaS account and have a policy that denies the organizations:LeaveOrganization or the organizations:DescribeOrganization action, you must add a Condition to make an exception for the DoiT management role.

For example:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Deny",
      "Action": [
        "organizations:LeaveOrganization",
        "organizations:DescribeOrganization"
      ],
      "Resource": "*",
      "Condition": {
        "ArnNotEquals": {
          "aws:PrincipalArn": "arn:aws:iam::*:role/doitintl-mgmt-role"
        }
      }
    }
  ]
}
Last updated on