Case study
Case Study: AWS bill, security hardening and backup risks found during an infrastructure review
This example shows how a production infrastructure problem can be investigated methodically, improved safely and turned into clearer operational practice.
Context
A organisation was running production workloads on AWS using EC2, EBS, S3, Route 53, CloudFront and CloudWatch.
The customer wanted to know why costs were increasing and whether backup processes/security hardening were good enough before making further changes.
The problem
- Unused or oversized resources were increasing monthly AWS spend.
- S3 buckets, snapshots and retention policies were not clearly documented.
- Security Hardening groups and IAM permissions had grown over time and needed review.
- CloudWatch observability existed in places, but alerts did not clearly cover the highest-risk failures.
Our approach
- Reviewed Cost Explorer/Billing, EC2, EBS, snapshots, S3 usage, CloudFront, Route 53 and CloudWatch configuration.
- Checked IAM and access patterns for obvious over-permissioning and unused users/keys.
- Identified backup gaps, retention issues and resources that needed cleanup or policy decisions.
- Prioritised findings into quick wins, risk fixes and changes that needed customer approval.
Hands-on outcomes
Relevant technologies and keywords
These are the main technologies, solutions and search terms connected to this case study.
Related solutions
Relevant solutions for similar infrastructure problems.
Want assist with a similar issue?
Send the symptoms, affected system, recent changes and organisation impact. We will suggest the most appropriate route: emergency engineering assistance, a fixed-scope engineering fix, an infrastructure review or a wider project.