The SRE's Guide to Azure Cost Optimization: A Taming Strategy for 'Dirty' Environments
A practical, step-by-step strategy for finding and safely removing waste in real-world, complex Azure environments - even with no documentation or tagging.
Insights
Practical guides for cleaning up messy cloud environments, and the real engagements behind them.
A practical, step-by-step strategy for finding and safely removing waste in real-world, complex Azure environments - even with no documentation or tagging.
An anonymized case study: 23.2 TB of S3 data had gone untouched for more than two years, and much of it had no clear owner. How access analysis and owner interviews moved it to Glacier Deep Archive without deleting a file.
CVE-2026-97631 (CVSS 4.0 9.5) hits EDK II's PXE driver through edk2-stable202608. No vendor firmware fix yet. Find which hosts are yours to fix in an hour.
PHP2Shell, a Node.js RCE, a CVSS 10 GitLab bug, a backdoored LiteLLM and a CA key that was 4. The fixes are out. Can you find every affected resource?
Six checks to finish before you delete anything in AWS: map dependencies, confirm the owner, assess cost impact, test your backups, tear down in the right order and confirm billing has actually stopped.
How IBM Cloudability, CloudHealth, CloudZero, Finout, Vantage and the native AWS and Azure tools compare on cost visibility, allocation, ownership and actionability, with published pricing and a shortlist by team size.
A read-only method for finding out who launched an EC2 instance or created any other AWS resource: what CloudTrail records, how to decode assumed roles and SSO sessions, and how to search further back than 90 days, across accounts.
A time-boxed method for finding every AWS resource nobody owns: start with account ownership, add name-pattern rules, and sort what's left into orphans, shared and forgotten.
A practical, step-by-step strategy for finding and safely removing waste in real-world, complex Azure environments - even with no documentation or tagging.
Practical strategies for cost management and resource attribution in Azure environments with poor or nonexistent tagging. Learn techniques that actually work.
Find every common type of Azure orphan with Resource Graph queries, confirm each one is really unused, delete safely with a snapshot and an audit trail, and set ownership rules that stop new orphans.
An anonymized case study: 23.2 TB of S3 data had gone untouched for more than two years, and much of it had no clear owner. How access analysis and owner interviews moved it to Glacier Deep Archive without deleting a file.
An anonymized case study: seven Azure SQL databases left behind after a migration cost a financial services company $12,600 a month. How they were verified as unused and removed without risk to production.
An anonymized case study: 89 Azure VMs left over from an acquisition ran at near-zero CPU for six months, costing a technology startup $18,400 a month. How they were found, verified and removed.