Every audit below is based on real patterns from production AWS environments. Company names anonymized on request.
Case Study
Findings
ECS tasks in private subnets routing all traffic (including S3, DynamoDB, SSM calls) through NAT Gateway at $0.045/GB. S3 calls alone = $520/month. Internal AWS service traffic never needs to leave the VPC.
Add VPC Gateway Endpoints for S3 and DynamoDB (free). Add Interface Endpoints for SSM and ECR.
db.r6g.2xlarge running at 12% average CPU, peak 34%, memory never above 18GB. Upsized 8 months ago during a traffic spike, never reviewed.
Downsize to db.r6g.large. Run parallel for 72 hours with Performance Insights to validate before cutover.
23 log groups, no retention policy, 2.4TB of logs going back 3 years at $0.03/GB/month. 90% of logs older than 30 days never queried. Debug logging enabled in production.
30-day retention on app logs, 90-day on audit logs. Switch ECS tasks from DEBUG to INFO.
2 Application Load Balancers from a deprecated staging environment ($16.43/mo each). 3 unattached Elastic IPs ($3.65/mo each). Zero traffic for 90+ days.
Delete idle ALBs, release unattached Elastic IPs. Add monthly orphaned-resource review to ops checklist.
6 Fargate tasks at 1 vCPU/2GB running 24/7. 70% of traffic between 9am–7pm weekdays. Overnight/weekend CPU under 5%. No Application Auto Scaling configured.
ECS Application Auto Scaling with CPU target tracking (60%). Min 2 tasks overnight, max 10 at peak.
4.2TB in S3 Standard ($0.023/GB). 80% of objects not accessed in 90+ days — processed batch files with no expiry.
Lifecycle policy: Standard-IA after 30 days, Glacier Instant Retrieval after 90 days.
"We knew we were probably wasting something on AWS, but couldn't find it ourselves. Runtimez found $2,300/month in 5 days — the NAT Gateway finding alone was worth 10× the fee."— CTO, Series B SaaS company (anonymized on request)
Also Identified
$1,500 flat · 5 business days · free 30-min scoping call first
Book a scoping call