
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
You used AI to write your infrastructure. Now know exactly what it costs — before you deploy.
A zero-config CLI tool that reads your cdk synth output, calls the AWS Price List API for real prices, and produces a tiered cost estimate table across user growth scenarios.
AI-assisted IaC development generates working infrastructure fast — but a single configuration decision (NAT Gateway, multi-AZ RDS, DynamoDB billing mode change) can shift monthly costs by hundreds of dollars silently. This tool makes that visible before you deploy.
cdk synth → CDK Adapter → Classifier → AWS Price List API → Free Tier Deduction → Calculator → Output
cdk.out/manifest.json + CloudFormation templates, normalizes resourcescost-profile.yaml, writes report JSONcdk synth with no setup--no-free-tier to disable)Fixed cost (priced exactly from plan): EC2, RDS, Aurora Provisioned, ECS Fargate, ElastiCache, NAT Gateway, OpenSearch, ALB/NLB, EKS Control Plane, MSK, WAF WebACL, Transfer Family, Route 53, Kinesis (provisioned)
Variable cost (scales with users, generates cost-profile.yaml fields):
Lambda, API Gateway, DynamoDB, S3, CloudFront, Cognito, SQS, SNS, Step Functions, EventBridge, Secrets Manager, Bedrock, EKS Nodegroups, Aurora Serverless v2, WAF requests, Kinesis (on-demand), Transfer Family data
# Install
npm install --save-dev slate
# Run
npx cdk synth
npx slate estimate
# Interactive wizard to refine estimates
npx slate wizard
| Command | Description |
|---|---|
slate estimate | Full pipeline — reads cdk.out/, outputs tier table |
slate estimate --ci | CI mode — exits 1 on budget failure, includes drift |
slate estimate --no-free-tier | Disable free tier deductions |
slate estimate --json | Output as JSON |
slate wizard | Interactive profile wizard |
slate drift | Show drift between last two reports |
slate init | Create config file with defaults |
slate.config.json:
{
"region": "us-east-1",
"iac": "cdk",
"budget": {
"tier": "1k-10k",
"max_monthly_usd": 500,
"use": "midpoint"
}
}
cost-profile.yaml is generated with fields for your detected variable resources. Fill in what you know — leave blank what you don't.
| Fields filled | Output |
|---|---|
| None | All variable costs shown as min–max range |
| Some | Filled fields exact, empty fields ranged |
| All | Every line item exact |
cdk synth workingpricing:GetProductsTypeScript, ESM, Commander, @aws-sdk/client-pricing, @inquirer/prompts, js-yaml, chalk, tsup, vitest
MIT
FAQs
Pre-deploy AWS cost estimation for CDK infrastructure
We found that slate-cost demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.