a service that you give aws access keys that logs in every night and enumerates and then deletes any of you ec2 instances in any region not tagged "do not erase" so that you don't forget about that throwaway piece and end up with a bill 3 weeks later