AWS Cost Optimization & Security Audit
If your AWS bill keeps climbing and nobody's quite sure why, or you suspect your environment has security gaps that haven't been looked at since launch, this audit is built for you. It's aimed at engineering teams in Canada and the US who need a clear, prioritized picture of where money and risk are hiding in their AWS account, without committing to a multi-month engagement first. Many teams accumulate waste gradually: idle resources, oversized instances, forgotten snapshots, and security settings that were reasonable at a smaller scale but no longer are. This audit surfaces all of it in one focused pass, so you can act on the highest-impact items first instead of guessing.
What's included
- Full review of EC2, RDS, S3, and other core AWS spend for waste and oversized resources
- Security posture review covering IAM, least-privileged access, network exposure, and logging
- A prioritized action plan ranking fixes by cost and risk impact versus effort
- Quick-win recommendations you can implement right away
- A written report of findings
Proof it works
- Implemented full encryption-at-rest across an AWS environment with zero downtime, directly enabling a $30M GTV enterprise deal.
- Cut cloud costs 40% and reduced alert fatigue 80% by introducing dynamic EC2 autoscaling.
Is this right for you?
This audit is a fit if you're looking at your AWS bill and can't fully explain why it's the size it is, or if nobody on the team has reviewed security configuration since the account was first set up. It's a fixed-price, scoped engagement rather than an open-ended retainer — you know the cost going in, and it starts with a free 30-minute scoping call to understand your environment and confirm scope before anything is billed. It's not the right fit if you're looking for ongoing, hands-on management of your AWS account day-to-day — that's closer to the Strategic Advisory retainer. It's also not a substitute for a formal compliance audit (e.g. SOC 2, PCI) if that's what you specifically need, though the findings often overlap with what a compliance audit would flag. Everything identified during the audit — the findings, the action plan, any configuration recommendations — belongs to you; nothing is withheld to force a follow-on engagement. I reply to new inquiries within 24 hours, and I work with teams based in both Canada and the US.
FAQ
How is the audit priced?
It's a fixed-price, scoped engagement — not hourly, and not an open-ended retainer. After a free 30-minute scoping call, I take time to think through what was discussed and follow up with the confirmed scope and price — usually within a couple of days, and up to a week for more complex asks.
How long does a typical audit take?
Typically a couple of days to a couple of weeks, depending on scope, complexity, and how quickly we get access and get oriented in your environment — the scoping call narrows this down before work starts.
Will I be locked into fixing everything you find?
No. You receive a prioritized action plan and full documentation of findings; you decide what to act on and when, and you own the plan outright — there's no obligation to hire me for the implementation work.
How it works
Simple, low-friction engagement. No lengthy contracts or discovery phases.
Tell me what you need
Fill out the contact form with a brief description of your challenge. I'll respond within 24 hours.
Quick scoping call
We jump on a 30-minute call to understand your environment, goals, and timeline. I'll follow up with a clear scope and fixed price — usually within a couple of days, up to a week for more complex asks.
I get to work
Hands-on delivery with regular updates. You get clean documentation and knowledge transfer — not a black box.
Done — and you own it
Everything I build is yours. I document it thoroughly so your team can maintain and extend it independently.
Ready to talk about aws cost & security audit?
Tell me a bit about your challenge and I'll get back to you within 24 hours.
Get in touch →