Compute
Rightsizing, autoscaling, reserved capacity, environment hygiene.
Data
Storage tiering, lifecycle policies, backup verification, egress visibility.
Security & access
IAM hygiene, secrets management, audit logging, MFA coverage.
Key takeaways
- Run the checklist quarterly
- Pair each finding with an owner
- Track savings as a metric, not an anecdote