If you run AWS at any real scale, you eventually accumulate thousands of

stale EBS snapshots — leftovers from decommissioned volumes, forgotten AMIs,

one-off backups nobody ever cleaned up. Cloud Custodian

(c7n) is a popular way to find and delete them on a schedule. This post

walks through four pitfalls we hit while building a "safe" cleanup