How to
Define exact VM scope and schedule windows controlled by your team, not by automatic environment assumptions.
Back to How To GuidesFresh inventory
Run a scan before creating the policy so the VM list reflects current resources.
Clear ownership
Confirm who owns each selected VM and who can approve schedule changes.
Write permissions
Read-only cloud credentials can estimate impact, but cannot execute start/stop actions.
Business window
Document timezone, working hours, weekend behavior and holiday expectations.
Basic VM scheduling uses provider control-plane APIs. TurboFinOps does not install an agent on the VM for start/stop execution. Guest agents may still matter for provider-specific OS features, scripts or graceful in-guest operations, but the scheduling action itself depends on cloud IAM/RBAC.
AWS EC2
Use describe permissions for discovery and start/stop permissions for execution.
ec2:StartInstancesec2:StopInstancesec2:DescribeInstancesAzure VM
TurboFinOps deallocates VMs for real compute savings, so deallocate permission is required.
Microsoft.Compute/virtualMachines/start/actionMicrosoft.Compute/virtualMachines/deallocate/actionMicrosoft.Compute/virtualMachines/readGCP Compute
Grant these on the project or a narrower custom role used by the connected service account.
compute.instances.startcompute.instances.stopcompute.instances.getcompute.instances.listExclude production databases, always-on bastion hosts, shared build workers and any VM with unclear ownership until the owner signs off. If a VM needs temporary exclusion, record the reason in the action or policy notes so Finance and Operations understand why projected savings changed.
Start/stop automation pipeline can be enabled progressively after policy review. Keep a rollback playbook for workloads with strict availability requirements. Start with non-production scopes, watch the first week of execution history, then expand only after owners confirm there were no missed business-hour starts.
TurboFinOps
Connect AWS, Azure, or GCP and get actionable findings, score trends, and auditable remediation paths in minutes.