What we look at
The bill, the workloads that create it, and the risks sitting next to them. Security and cost are reviewed together, because a cheap change that opens a hole is not a win.
We also look at how the team operates what is running: who can change it, what happens when it breaks, and which practices were agreed and then skipped.
- Cost review tied to the workloads, not a generic percentage
- Security practices against how the account is actually used
- Operating changes your team can keep doing after we leave