IAM cleanup
Remove stale users and keys, enforce MFA, move to roles and SSO, and tighten policies to least privilege.
Cloud Infrastructure Hygiene
Cloud accounts drift. A contractor’s access key from two years ago, an oversized database nobody sized down, snapshots with no retention policy. I keep the account clean month after month, so the bill is predictable and the audit isn’t scary.
Signs you need this
If this sounds like you
- The cloud bill went up and nobody knows why
- Root or owner credentials are shared or unused-but-active
- IAM users and keys from people who left
- No alerting until a customer tells you something’s down
- Backups are “on” but restore has never been tried
Deliverables
What you get
Cost review
Find idle and oversized resources, set budgets and alerts, and right-size where it’s safe.
Backups & recovery
Snapshot and backup policies with retention, plus documented and tested recovery steps.
Monitoring & posture
Baseline alerting, patch status, and a monthly posture report you can hand to a customer or auditor.
In scope
- AWS, Azure, or GCP account hygiene
- IAM / Entra / Cloud IAM least-privilege cleanup
- Cost Explorer reviews, budgets, and anomaly alerts
- Backup policies and restore drills
- CloudWatch / Azure Monitor / Cloud Monitoring baselines
- Patch posture and security findings triage
Not included
- Application development or feature work
- Large migrations (quoted separately as a project)
- 24/7 on-call or incident response
Common tools
AWSAzureGCPTerraformCloudWatchSecurity HubDefender for CloudIAM Identity Center
FAQ
Common questions
Do you write application code?
No. This is ops and hygiene — the account, not the app. I’ll work alongside your developers and give them a cleaner, safer place to ship.
Do you need admin access?
I start with read-only access for the audit, then use scoped roles for changes. Every change is logged and explained in the monthly report.
Can you do a migration?
Migrations are scoped separately as fixed-price projects. The monthly hygiene work keeps things tidy afterward.
Will this pay for itself?
Often, through cost cleanup alone — but that’s not a promise. You’ll see findings and estimated savings in the first month’s report.
Tell me what’s broken. I’ll map the way up.
A free 30-minute call to talk through your stack, your size, and the actual headache. You’ll leave with next steps, whether or not we work together.