FAQ

AWS consulting FAQ

How we work, what the cost audit involves, what is in and out of scope, and how we handle Canadian data. If your question is not here, ask it on a 15-minute call.

Working with us

What kinds of engagement do you offer?

Three. A two-week, fixed-fee AWS cost audit. Fixed-price project work, agreed after a scoping call. And an embedded fractional AWS engineer retainer for ongoing work. Most clients start with the audit and move on to a project or a retainer afterwards.

Who leads the work?

An AWS Certified Solutions Architect with more than five years of hands-on experience building and operating production workloads for a B2B SaaS company. Alongside client work, we also design and run a multi-tenant SaaS platform on AWS end to end.

How are projects priced?

At a fixed price, agreed after a short scoping call and set out in a written proposal with the deliverables and a delivery date. No hourly billing, no open-ended meters. The cost audit is also a fixed fee, based on the size of your environment.

How does a retainer work?

A short initial commitment, then month to month with 30 days' notice on either side. The size is set to what you need, from light advisory presence to deep weekly involvement, and it can move up or down as your roadmap changes.

Where are you based, and do you work outside Canada?

We are based in Canada and work remotely with teams across North America and Europe.

How do we get started?

Book a 15-minute call on the contact page, or send a message with what you are running and your rough monthly AWS spend. We reply within one business day. If it is not a fit, we will say so.

The cost audit

How much can an AWS cost audit save?

Most environments we review can cut 25 to 40% of the monthly bill without touching what customers see. If the audit does not find at least $5,000 in annual savings, you do not pay for it.

What access do you need for the audit?

A read-only IAM role, which you deploy from a CloudFormation template we provide. We can see configuration, metrics and billing data. We cannot change anything, and you can remove the role the moment the audit ends.

How long does the audit take, and how much of our time?

Two weeks from kickoff to findings review. Your team spends about 30 minutes on the kickoff call, a few minutes deploying the role, and 90 minutes on the findings review. Everything in between is our work.

What do we get at the end of the audit?

A 25 to 40 page report with every finding ranked by dollar impact, effort and risk, a 30/60/90-day roadmap, and reliability and security flags noted along the way. Then a 90-minute findings review with your leadership team. More on how the audit works.

Scope

What is in scope?

AWS infrastructure: architecture design and review, Terraform, build and implementation, migration, cost optimization, Savings Plan and Reserved Instance strategy, reliability and disaster recovery, deployment pipelines, monitoring, IAM and networking, security and data residency, and automation. The full list is on the services page.

Do you write application code?

No. Your engineers know your application better than we do. We work on the AWS infrastructure it runs on, the pipeline that deploys it, and the automation around it.

Do you provide 24/7 on-call?

No. We make production easier to run, with alarms that point at the problem, deploys that roll back on their own, and runbooks your team can follow. The pager stays with your team.

Do you work with other cloud providers?

No. Everything we do is on AWS.

Can you get us SOC 2 certified?

Only an auditor can certify you. We can prepare the ground for SOC 2 or similar, with access control, logging, encryption and documentation in place, but the certification itself is out of our hands.

Canada and data

Do you keep Canadian data in Canada?

For Canadian clients we build in Canadian AWS regions by default: Canada (Central), ca-central-1, in Montreal, or Canada West (Calgary), ca-west-1. More on AWS security and Canadian data residency.

Can backups and disaster recovery copies stay in Canada too?

Yes. With two Canadian AWS regions, the second copy can sit in the other Canadian region rather than outside the country. More on AWS reliability and disaster recovery.

Does the law require our data to stay in Canada?

That is a question for your counsel, not for us. Clients do ask about PIPEDA and provincial privacy rules. What we do is build so your data stays in Canadian regions and document where it lives, so whatever the answer is, you can show it.

Still have a question?

Fifteen minutes on a call is usually enough to answer it, and to tell whether we are a fit. If we are not, we will say so.