aws-dynamodb-audit — find the DynamoDB tables that cost you data or money

Static audit of DynamoDB tables: point-in-time recovery off, no deletion protection, AWS-owned keys where a CMK was the whole point of the compliance ticket, provisioned capacity sitting far under its consumed average, global secondary indexes projecting ALL for no reason, TTL absent on tables that only ever grow, and on-demand tables whose steady traffic would be cheaper provisioned. Reads live tables through boto3 or a JSON dump, so every rule is testable offline.