aws-cost-calculator-cli 1.0.3__py3-none-any.whl

aws_cost_calculator_cli-1.0.3.dist-info/METADATA

@@ -0,0 +1,164 @@
+Metadata-Version: 2.4
+Name: aws-cost-calculator-cli
+Version: 1.0.3
+Summary: AWS Cost Calculator CLI - Calculate daily and annual AWS costs across multiple accounts
+Home-page: https://github.com/yourusername/cost-calculator
+Author: Cost Optimization Team
+Author-email: 
+Project-URL: Documentation, https://github.com/yourusername/cost-calculator/blob/main/README.md
+Keywords: aws cost calculator billing optimization cloud
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Topic :: System :: Monitoring
+Classifier: Topic :: Utilities
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click>=8.0.0
+Requires-Dist: boto3>=1.26.0
+Dynamic: author
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: keywords
+Dynamic: license-file
+Dynamic: project-url
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+# AWS Cost Calculator (cc)
+
+A CLI tool to quickly calculate AWS costs across multiple accounts.
+
+## Installation
+
+```bash
+cd ~/cost-calculator
+pip install -e .
+```
+
+## Quick Start
+
+### 1. Login to AWS SSO
+
+```bash
+aws sso login --profile my_aws_profile
+```
+
+**Note:** You need to do this before running cost calculations. The SSO session typically lasts 8-12 hours.
+
+### 2. Initialize a profile
+
+```bash
+cc init --profile myprofile \
+  --aws-profile my_aws_profile \
+  --accounts "123456789012,234567890123,345678901234"
+```
+
+### 3. Calculate costs
+
+```bash
+# Default: Today minus 2 days, going back 30 days
+cc calculate --profile myprofile
+
+# Specific start date
+cc calculate --profile myprofile --start-date 2025-11-04
+
+# Custom offset and window
+cc calculate --profile myprofile --offset 2 --window 30
+
+# JSON output
+cc calculate --profile myprofile --json-output
+```
+
+### 4. List profiles
+
+```bash
+cc list-profiles
+```
+
+## How It Works
+
+### Date Calculation
+- **Start Date**: Defaults to today, or specify with `--start-date`
+- **Offset**: Days to go back from start date (default: 2)
+- **Window**: Number of days to analyze (default: 30)
+
+Example: If today is Nov 4, 2025:
+- With offset=2, window=30: Analyzes Oct 3 - Nov 2 (30 days)
+
+### Cost Calculation
+1. **Operational Costs**: Sum of daily costs ÷ window days
+2. **Support Allocation**: 
+   - Gets support cost from the analysis month
+   - Divides by 2 (50% allocation)
+   - Divides by days in that month
+3. **Daily Rate**: Operational + Support per day
+4. **Annual Projection**: Daily rate × 365
+
+### Filters Applied
+- **Billing Entity**: AWS only (excludes marketplace)
+- **Excluded**: Tax, Support (calculated separately)
+- **Metric**: Net Amortized Cost
+
+## Configuration
+
+Profiles are stored in: `~/.config/cost-calculator/profiles.json`
+
+Example:
+```json
+{
+  "myprofile": {
+    "aws_profile": "my_aws_profile",
+    "accounts": ["123456789012", "234567890123", "345678901234"]
+  }
+}
+```
+
+## Examples
+
+```bash
+# Quick daily check
+cc calculate --profile myprofile
+
+# Historical analysis
+cc calculate --profile myprofile --start-date 2025-10-01
+
+# Export to JSON for processing
+cc calculate --profile myprofile --json-output > costs.json
+
+# Different window size
+cc calculate --profile myprofile --window 60
+```
+
+## Output
+
+```
+Analyzing: 2025-10-03 to 2025-11-02 (30 days)
+AWS Profile: my_aws_profile
+Accounts: 3
+
+Fetching cost data...
+Fetching support costs...
+============================================================
+Period: 2025-10-03 to 2025-11-02
+Days analyzed: 30
+============================================================
+Total operational cost: $450,000.00
+Daily operational: $14,516.13
+Support (month): $15,000.00
+Support per day (÷2÷days): $241.94
+============================================================
+DAILY RATE: $14,758.07
+ANNUAL PROJECTION: $5,386,695
+============================================================
+```

aws_cost_calculator_cli-1.0.3.dist-info/RECORD

@@ -0,0 +1,8 @@
+aws_cost_calculator_cli-1.0.3.dist-info/licenses/LICENSE,sha256=cYtmQZHNGGTXOtg3T7LHDRneleaH0dHXHfxFV3WR50Y,1079
+cost_calculator/__init__.py,sha256=PJeIqvWh5AYJVrJxPPkI4pJnAt37rIjasrNS0I87kaM,52
+cost_calculator/cli.py,sha256=2h6jJreraM5ysKvy6vREvHJw7_3UjDegOpNTRscLnwE,18971
+aws_cost_calculator_cli-1.0.3.dist-info/METADATA,sha256=p2NSEbaQPwt9Q5F1WjAZTFFNBoLp2IjCK1aA0GmxJHQ,4227
+aws_cost_calculator_cli-1.0.3.dist-info/WHEEL,sha256=Nw36Djuh_5VDukK0H78QzOX-_FQEo6V37m3nkm96gtU,91
+aws_cost_calculator_cli-1.0.3.dist-info/entry_points.txt,sha256=_5Qy4EcHbYVYrdgOu1E48faMHb9fLUl5VJ3djDHuJBo,47
+aws_cost_calculator_cli-1.0.3.dist-info/top_level.txt,sha256=PRwGPPlNqASfyhGHDjSfyl4SXeE7GF3OVTu1tY1Uqyc,16
+aws_cost_calculator_cli-1.0.3.dist-info/RECORD,,

aws_cost_calculator_cli-1.0.3.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (80.7.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

aws_cost_calculator_cli-1.0.3.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+cc = cost_calculator.cli:cli

aws_cost_calculator_cli-1.0.3.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Cost Optimization Team
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

aws_cost_calculator_cli-1.0.3.dist-info/top_level.txt

@@ -0,0 +1 @@
+cost_calculator

cost_calculator/__init__.py

@@ -0,0 +1,2 @@
+"""AWS Cost Calculator CLI"""
+__version__ = '1.0.0'

cost_calculator/cli.py

@@ -0,0 +1,543 @@
+#!/usr/bin/env python3
+"""
+AWS Cost Calculator CLI
+
+Usage:
+    cc --profile myprofile
+    cc --profile myprofile --start-date 2025-11-04
+    cc --profile myprofile --offset 2 --window 30
+"""
+
+import click
+import boto3
+import json
+from datetime import datetime, timedelta
+from pathlib import Path
+
+
+def load_profile(profile_name):
+    """Load profile configuration from ~/.config/cost-calculator/profiles.json"""
+    config_dir = Path.home() / '.config' / 'cost-calculator'
+    config_file = config_dir / 'profiles.json'
+    creds_file = config_dir / 'credentials.json'
+    
+    if not config_file.exists():
+        raise click.ClickException(
+            f"Profile configuration not found at {config_file}\n"
+            f"Run: cc init --profile {profile_name}"
+        )
+    
+    with open(config_file) as f:
+        profiles = json.load(f)
+    
+    if profile_name not in profiles:
+        raise click.ClickException(
+            f"Profile '{profile_name}' not found in {config_file}\n"
+            f"Available profiles: {', '.join(profiles.keys())}"
+        )
+    
+    profile = profiles[profile_name]
+    
+    # Load credentials if using static credentials (not SSO)
+    if 'aws_profile' not in profile:
+        if not creds_file.exists():
+            raise click.ClickException(
+                f"No credentials found for profile '{profile_name}'.\n"
+                f"Run: cc configure --profile {profile_name}"
+            )
+        
+        with open(creds_file) as f:
+            creds = json.load(f)
+        
+        if profile_name not in creds:
+            raise click.ClickException(
+                f"No credentials found for profile '{profile_name}'.\n"
+                f"Run: cc configure --profile {profile_name}"
+            )
+        
+        profile['credentials'] = creds[profile_name]
+    
+    return profile
+
+
+def calculate_costs(profile_config, accounts, start_date, offset, window):
+    """
+    Calculate AWS costs for the specified period.
+    
+    Args:
+        profile_config: Profile configuration (with aws_profile or credentials)
+        accounts: List of AWS account IDs
+        start_date: Start date (defaults to today)
+        offset: Days to go back from start_date (default: 2)
+        window: Number of days to analyze (default: 30)
+    
+    Returns:
+        dict with cost breakdown
+    """
+    # Calculate date range
+    if start_date:
+        end_date = datetime.strptime(start_date, '%Y-%m-%d')
+    else:
+        end_date = datetime.now()
+    
+    # Go back by offset days
+    end_date = end_date - timedelta(days=offset)
+    
+    # Start date is window days before end_date
+    start_date_calc = end_date - timedelta(days=window)
+    
+    # Format for API (end date is exclusive, so add 1 day)
+    api_start = start_date_calc.strftime('%Y-%m-%d')
+    api_end = (end_date + timedelta(days=1)).strftime('%Y-%m-%d')
+    
+    click.echo(f"Analyzing: {api_start} to {end_date.strftime('%Y-%m-%d')} ({window} days)")
+    
+    # Initialize boto3 client
+    try:
+        if 'aws_profile' in profile_config:
+            # SSO-based authentication
+            aws_profile = profile_config['aws_profile']
+            click.echo(f"AWS Profile: {aws_profile} (SSO)")
+            click.echo(f"Accounts: {len(accounts)}")
+            click.echo("")
+            session = boto3.Session(profile_name=aws_profile)
+            ce_client = session.client('ce', region_name='us-east-1')
+        else:
+            # Static credentials
+            creds = profile_config['credentials']
+            click.echo(f"AWS Credentials: Static")
+            click.echo(f"Accounts: {len(accounts)}")
+            click.echo("")
+            
+            session_kwargs = {
+                'aws_access_key_id': creds['aws_access_key_id'],
+                'aws_secret_access_key': creds['aws_secret_access_key'],
+                'region_name': creds.get('region', 'us-east-1')
+            }
+            
+            if 'aws_session_token' in creds:
+                session_kwargs['aws_session_token'] = creds['aws_session_token']
+            
+            session = boto3.Session(**session_kwargs)
+            ce_client = session.client('ce')
+            
+    except Exception as e:
+        if 'Token has expired' in str(e) or 'sso' in str(e).lower():
+            if 'aws_profile' in profile_config:
+                raise click.ClickException(
+                    f"AWS SSO session expired or not initialized.\n"
+                    f"Run: aws sso login --profile {profile_config['aws_profile']}"
+                )
+            else:
+                raise click.ClickException(
+                    f"AWS credentials expired.\n"
+                    f"Run: cc configure --profile <profile_name>"
+                )
+        raise
+    
+    # Build filter
+    cost_filter = {
+        "And": [
+            {
+                "Dimensions": {
+                    "Key": "LINKED_ACCOUNT",
+                    "Values": accounts
+                }
+            },
+            {
+                "Dimensions": {
+                    "Key": "BILLING_ENTITY",
+                    "Values": ["AWS"]
+                }
+            },
+            {
+                "Not": {
+                    "Dimensions": {
+                        "Key": "RECORD_TYPE",
+                        "Values": ["Tax", "Support"]
+                    }
+                }
+            }
+        ]
+    }
+    
+    # Get daily costs
+    click.echo("Fetching cost data...")
+    try:
+        response = ce_client.get_cost_and_usage(
+            TimePeriod={
+                'Start': api_start,
+                'End': api_end
+            },
+            Granularity='DAILY',
+            Metrics=['NetAmortizedCost'],
+            Filter=cost_filter
+        )
+    except Exception as e:
+        if 'Token has expired' in str(e) or 'expired' in str(e).lower():
+            raise click.ClickException(
+                f"AWS SSO session expired.\n"
+                f"Run: aws sso login --profile {aws_profile}"
+            )
+        raise
+    
+    # Calculate total
+    total_cost = sum(
+        float(day['Total']['NetAmortizedCost']['Amount'])
+        for day in response['ResultsByTime']
+    )
+    
+    # Get support cost from the 1st of the month containing the end date
+    # Support is charged on the 1st of each month for the previous month's usage
+    # For Oct 3-Nov 2 analysis, we get support from Nov 1 (which is October's support)
+    support_month_date = end_date.replace(day=1)
+    support_date_str = support_month_date.strftime('%Y-%m-%d')
+    support_date_end = (support_month_date + timedelta(days=1)).strftime('%Y-%m-%d')
+    
+    click.echo("Fetching support costs...")
+    support_response = ce_client.get_cost_and_usage(
+        TimePeriod={
+            'Start': support_date_str,
+            'End': support_date_end
+        },
+        Granularity='DAILY',
+        Metrics=['NetAmortizedCost'],
+        Filter={
+            "And": [
+                {
+                    "Dimensions": {
+                        "Key": "LINKED_ACCOUNT",
+                        "Values": accounts
+                    }
+                },
+                {
+                    "Dimensions": {
+                        "Key": "RECORD_TYPE",
+                        "Values": ["Support"]
+                    }
+                }
+            ]
+        }
+    )
+    
+    support_cost = float(support_response['ResultsByTime'][0]['Total']['NetAmortizedCost']['Amount'])
+    
+    # Calculate days in the month that the support covers
+    # Support on Nov 1 covers October (31 days)
+    support_month = support_month_date - timedelta(days=1)  # Go back to previous month
+    days_in_support_month = support_month.day  # This gives us the last day of the month
+    
+    # Support allocation: divide by 2 (half to Khoros), then by days in month
+    support_per_day = (support_cost / 2) / days_in_support_month
+    
+    # Calculate daily rate
+    # NOTE: We divide operational by window, but support by days_in_support_month
+    # This matches the console's calculation method
+    daily_operational = total_cost / days_in_support_month  # Use 31 for October, not 30
+    daily_total = daily_operational + support_per_day
+    
+    # Annual projection
+    annual = daily_total * 365
+    
+    return {
+        'period': {
+            'start': api_start,
+            'end': end_date.strftime('%Y-%m-%d'),
+            'days': window
+        },
+        'costs': {
+            'total_operational': total_cost,
+            'daily_operational': daily_operational,
+            'support_month': support_cost,
+            'support_per_day': support_per_day,
+            'daily_total': daily_total,
+            'annual_projection': annual
+        }
+    }
+
+
+@click.group()
+def cli():
+    """
+    AWS Cost Calculator - Calculate daily and annual AWS costs
+    
+    \b
+    Two authentication methods:
+    1. AWS SSO (recommended for interactive use)
+    2. Static credentials (for automation/CI)
+    
+    \b
+    Quick Start:
+      # SSO Method
+      aws sso login --profile my_aws_profile
+      cc init --profile myprofile --aws-profile my_aws_profile --accounts "123,456,789"
+      cc calculate --profile myprofile
+    
+      # Static Credentials Method
+      cc init --profile myprofile --aws-profile dummy --accounts "123,456,789"
+      cc configure --profile myprofile
+      cc calculate --profile myprofile
+    
+    \b
+    For detailed documentation, see:
+      - COST_CALCULATION_METHODOLOGY.md
+      - README.md
+    """
+    pass
+
+
+@cli.command()
+@click.option('--profile', required=True, help='Profile name (e.g., myprofile)')
+@click.option('--start-date', help='Start date (YYYY-MM-DD, default: today)')
+@click.option('--offset', default=2, help='Days to go back from start date (default: 2)')
+@click.option('--window', default=30, help='Number of days to analyze (default: 30)')
+@click.option('--json-output', is_flag=True, help='Output as JSON')
+def calculate(profile, start_date, offset, window, json_output):
+    """Calculate AWS costs for the specified period"""
+    
+    # Load profile configuration
+    config = load_profile(profile)
+    
+    # Calculate costs
+    result = calculate_costs(
+        profile_config=config,
+        accounts=config['accounts'],
+        start_date=start_date,
+        offset=offset,
+        window=window
+    )
+    
+    if json_output:
+        click.echo(json.dumps(result, indent=2))
+    else:
+        # Pretty print results
+        click.echo("=" * 60)
+        click.echo(f"Period: {result['period']['start']} to {result['period']['end']}")
+        click.echo(f"Days analyzed: {result['period']['days']}")
+        click.echo("=" * 60)
+        click.echo(f"Total operational cost: ${result['costs']['total_operational']:,.2f}")
+        click.echo(f"Daily operational: ${result['costs']['daily_operational']:,.2f}")
+        click.echo(f"Support (month): ${result['costs']['support_month']:,.2f}")
+        click.echo(f"Support per day (÷2÷days): ${result['costs']['support_per_day']:,.2f}")
+        click.echo("=" * 60)
+        click.echo(f"DAILY RATE: ${result['costs']['daily_total']:,.2f}")
+        click.echo(f"ANNUAL PROJECTION: ${result['costs']['annual_projection']:,.0f}")
+        click.echo("=" * 60)
+
+
+@cli.command()
+@click.option('--profile', required=True, help='Profile name to create')
+@click.option('--aws-profile', required=True, help='AWS CLI profile name')
+@click.option('--accounts', required=True, help='Comma-separated list of account IDs')
+def init(profile, aws_profile, accounts):
+    """Initialize a new profile configuration"""
+    
+    config_dir = Path.home() / '.config' / 'cost-calculator'
+    config_file = config_dir / 'profiles.json'
+    
+    # Create config directory if it doesn't exist
+    config_dir.mkdir(parents=True, exist_ok=True)
+    
+    # Load existing profiles or create new
+    if config_file.exists() and config_file.stat().st_size > 0:
+        try:
+            with open(config_file) as f:
+                profiles = json.load(f)
+        except json.JSONDecodeError:
+            profiles = {}
+    else:
+        profiles = {}
+    
+    # Parse accounts
+    account_list = [acc.strip() for acc in accounts.split(',')]
+    
+    # Add new profile
+    profiles[profile] = {
+        'aws_profile': aws_profile,
+        'accounts': account_list
+    }
+    
+    # Save
+    with open(config_file, 'w') as f:
+        json.dump(profiles, f, indent=2)
+    
+    click.echo(f"✓ Profile '{profile}' created with {len(account_list)} accounts")
+    click.echo(f"✓ Configuration saved to {config_file}")
+    click.echo(f"\nUsage: cc calculate --profile {profile}")
+
+
+@cli.command()
+def list_profiles():
+    """List all configured profiles"""
+    
+    config_file = Path.home() / '.config' / 'cost-calculator' / 'profiles.json'
+    
+    if not config_file.exists():
+        click.echo("No profiles configured. Run: cc init --profile <name>")
+        return
+    
+    with open(config_file) as f:
+        profiles = json.load(f)
+    
+    if not profiles:
+        click.echo("No profiles configured.")
+        return
+    
+    click.echo("Configured profiles:")
+    click.echo("")
+    for name, config in profiles.items():
+        click.echo(f"  {name}")
+        if 'aws_profile' in config:
+            click.echo(f"    AWS Profile: {config['aws_profile']} (SSO)")
+        else:
+            click.echo(f"    AWS Credentials: Configured (Static)")
+        click.echo(f"    Accounts: {len(config['accounts'])}")
+        click.echo("")
+
+
+@cli.command()
+def setup():
+    """Show setup instructions for manual profile configuration"""
+    import platform
+    
+    system = platform.system()
+    
+    if system == "Windows":
+        config_path = "%USERPROFILE%\\.config\\cost-calculator\\profiles.json"
+        config_path_example = "C:\\Users\\YourName\\.config\\cost-calculator\\profiles.json"
+        mkdir_cmd = "mkdir %USERPROFILE%\\.config\\cost-calculator"
+        edit_cmd = "notepad %USERPROFILE%\\.config\\cost-calculator\\profiles.json"
+    else:  # macOS/Linux
+        config_path = "~/.config/cost-calculator/profiles.json"
+        config_path_example = "/Users/yourname/.config/cost-calculator/profiles.json"
+        mkdir_cmd = "mkdir -p ~/.config/cost-calculator"
+        edit_cmd = "nano ~/.config/cost-calculator/profiles.json"
+    
+    click.echo("=" * 70)
+    click.echo("AWS Cost Calculator - Manual Profile Setup")
+    click.echo("=" * 70)
+    click.echo("")
+    click.echo(f"Platform: {system}")
+    click.echo(f"Config location: {config_path}")
+    click.echo("")
+    click.echo("Step 1: Create the config directory")
+    click.echo(f"  {mkdir_cmd}")
+    click.echo("")
+    click.echo("Step 2: Create the profiles.json file")
+    click.echo(f"  {edit_cmd}")
+    click.echo("")
+    click.echo("Step 3: Add your profile configuration (JSON format):")
+    click.echo("")
+    click.echo('  {')
+    click.echo('    "myprofile": {')
+    click.echo('      "aws_profile": "my_aws_profile",')
+    click.echo('      "accounts": [')
+    click.echo('        "123456789012",')
+    click.echo('        "234567890123",')
+    click.echo('        "345678901234"')
+    click.echo('      ]')
+    click.echo('    }')
+    click.echo('  }')
+    click.echo("")
+    click.echo("Step 4: Save the file")
+    click.echo("")
+    click.echo("Step 5: Verify it works")
+    click.echo("  cc list-profiles")
+    click.echo("")
+    click.echo("Step 6: Configure AWS credentials")
+    click.echo("  Option A (SSO):")
+    click.echo("    aws sso login --profile my_aws_profile")
+    click.echo("    cc calculate --profile myprofile")
+    click.echo("")
+    click.echo("  Option B (Static credentials):")
+    click.echo("    cc configure --profile myprofile")
+    click.echo("    cc calculate --profile myprofile")
+    click.echo("")
+    click.echo("=" * 70)
+    click.echo("")
+    click.echo("For multiple profiles, add more entries to the JSON:")
+    click.echo("")
+    click.echo('  {')
+    click.echo('    "profile1": { ... },')
+    click.echo('    "profile2": { ... }')
+    click.echo('  }')
+    click.echo("")
+    click.echo(f"Full path example: {config_path_example}")
+    click.echo("=" * 70)
+
+
+@cli.command()
+@click.option('--profile', required=True, help='Profile name to configure')
+@click.option('--access-key-id', prompt=True, hide_input=False, help='AWS Access Key ID')
+@click.option('--secret-access-key', prompt=True, hide_input=True, help='AWS Secret Access Key')
+@click.option('--session-token', default='', help='AWS Session Token (optional, for temporary credentials)')
+@click.option('--region', default='us-east-1', help='AWS Region (default: us-east-1)')
+def configure(profile, access_key_id, secret_access_key, session_token, region):
+    """Configure AWS credentials for a profile (alternative to SSO)"""
+    
+    config_dir = Path.home() / '.config' / 'cost-calculator'
+    config_file = config_dir / 'profiles.json'
+    creds_file = config_dir / 'credentials.json'
+    
+    # Create config directory if it doesn't exist
+    config_dir.mkdir(parents=True, exist_ok=True)
+    
+    # Load existing profiles
+    if config_file.exists() and config_file.stat().st_size > 0:
+        try:
+            with open(config_file) as f:
+                profiles = json.load(f)
+        except json.JSONDecodeError:
+            profiles = {}
+    else:
+        profiles = {}
+    
+    # Check if profile exists
+    if profile not in profiles:
+        click.echo(f"Error: Profile '{profile}' not found. Create it first with: cc init --profile {profile}")
+        return
+    
+    # Remove aws_profile if it exists (switching from SSO to static creds)
+    if 'aws_profile' in profiles[profile]:
+        del profiles[profile]['aws_profile']
+    
+    # Save updated profile
+    with open(config_file, 'w') as f:
+        json.dump(profiles, f, indent=2)
+    
+    # Load or create credentials file
+    if creds_file.exists() and creds_file.stat().st_size > 0:
+        try:
+            with open(creds_file) as f:
+                creds = json.load(f)
+        except json.JSONDecodeError:
+            creds = {}
+    else:
+        creds = {}
+    
+    # Store credentials (encrypted would be better, but for now just file permissions)
+    creds[profile] = {
+        'aws_access_key_id': access_key_id,
+        'aws_secret_access_key': secret_access_key,
+        'region': region
+    }
+    
+    if session_token:
+        creds[profile]['aws_session_token'] = session_token
+    
+    # Save credentials with restricted permissions
+    with open(creds_file, 'w') as f:
+        json.dump(creds, f, indent=2)
+    
+    # Set file permissions to 600 (owner read/write only)
+    creds_file.chmod(0o600)
+    
+    click.echo(f"✓ AWS credentials configured for profile '{profile}'")
+    click.echo(f"✓ Credentials saved to {creds_file} (permissions: 600)")
+    click.echo(f"\nUsage: cc calculate --profile {profile}")
+    click.echo("\nNote: Credentials are stored locally. For temporary credentials,")
+    click.echo("      you'll need to reconfigure when they expire.")
+
+
+if __name__ == '__main__':
+    cli()