# Automatic IAM translation, Azure anomaly hierarchy, and 13 new cleanup rules

> IAM imports for AWS and GCP now translate cloud roles automatically, flagging only the actions that genuinely need review. Azure cost-anomaly detection extends to Resource Group and Tenant levels, thirteen more orphaned and idle resources clean up automatically, and the cloud-accounts page spells out each account's permission state. ZopDay adds full AWS VM provisioning and deployment.

Source: https://zop.dev/changelog/v1-16-0
Published: 2026-06-03 · Tags: zopnight, zopday, iam, anomaly-detection, auto-remediation

---

Smarter imports and deeper anomaly detection.

## New

- ZopNight: Azure cost-anomaly detection now runs at the Resource Group and Tenant levels, not just the Subscription level
- ZopNight: 13 new orphan and idle cleanup rules with auto-remediation across AWS and Azure, now including free and zero-cost orphans
- ZopNight: the cloud-accounts page shows each account's permission state — Probe-blocked, Write access not set up, or Read-only — with guided fixes
- ZopDay: provision a complete AWS VM environment and deploy git- or image-based services onto it, with custom domains, HTTPS, and private registries

## Improved

- ZopNight: automatic IAM role translation for AWS and GCP imports, flagging only the actions that could not be translated for review
- ZopNight: app-wide tooltip polish, Cost Over Time from day 1, smarter Create Override defaults, and mobile sidebar scroll locking