AWS Infrastructure Audit & Optimization
Audit AWS infrastructure for costs, security, and performance risks
What You Can Do
Systematically analyze your AWS accounts to identify cost optimization opportunities, security gaps, and performance bottlenecks. You'll receive prioritized, actionable recommendations tailored to your architecture, from EC2 right-sizing to unused resource cleanup and security hardening.
Features
Identify over-provisioned instances and calculate monthly savings
Find unattached EBS volumes, idle RDS databases, and abandoned resources
Analyze IAM policies, security groups, and public S3 bucket exposure
Identify unexpected spending patterns and cost drivers by service
Recommend RI purchases and consolidation opportunities
Analyze RDS queries, indexing, and configuration bottlenecks
Review S3 storage classes, lifecycle policies, and data transfer costs
Generate consolidated audit reports across AWS Organizations
Example Output
Sample Audit Report Output:
AWS Infrastructure Audit — prod-123456789 (us-east-1)
Generated: 2026-07-30
- 📊 COST OPTIMIZATION OPPORTUNITIES
- ⭐ EC2 Right-Sizing (High Priority)
• i3.2xlarge → i3.large (4 instances: prod-web-04, prod-api-02, prod-batch-01, prod-worker-03)
• Projected monthly savings: $4,200
• Risk level: Low
- ⭐ Unattached Resources
• 23 orphaned EBS volumes (total: 520 GB, $52/month)
• 3 RDS instances in stopped state 90+ days ($850/month)
• Projected monthly savings: $1,850
- 🔒 SECURITY FINDINGS
- 🔴 CRITICAL
• S3 bucket 'legacy-data-2024' is publicly readable
• RDS prod-mysql-01 allows 0.0.0.0/0 inbound access
- 🟠 HIGH
• 4 IAM users with direct AWS console access (no MFA)
• Security groups with overly permissive egress rules
- ⚡ PERFORMANCE ISSUES
• RDS prod-mysql-01: Slow queries +45% above baseline
→ Recommendation: Add indexes on user_id, created_at columns
• CloudFront cache hit ratio: 62% (target: 85%+)
→ Recommendation: Extend TTL for static assets to 30 days
What's Included
- SKILL.md: Complete AWS audit workflows covering EC2, RDS, S3, Lambda, IAM, networking, and cost analysis
- Audit templates: Pre-built checklists for security, cost optimization, and performance tiers
- Report framework: Structured template for organizing findings by priority and service
- Cost calculator worksheet: Template for projecting savings and ROI from recommendations
- Service-specific guides: Deep-dive workflows for each major AWS service family
- Risk matrix: Framework for ranking findings by severity and implementation effort
Who It's For
- DevOps Engineers — Ongoing infrastructure optimization and cost management
- Cloud Architects — Design reviews and optimization strategy
- FinOps/Finance Teams — Cost allocation, budgeting, and financial planning
- Security Engineers — Compliance assessment and configuration hardening
- AWS Solutions Architects — Client audit delivery and advisory services
Best For
- Monthly cost reviews — Identify waste and quick optimization wins
- Multi-account audits — Consolidate findings across AWS Organizations
- Security posture assessments — Verify alignment with AWS Well-Architected Framework
- Performance baselines — Establish metrics and detect degradation
- Pre-migration planning — Assess workloads for cloud readiness and optimization
You might also like
Transform breaking news briefs into compelling visual story frameworks that guide photographers toward impactful coverage. You'll receive multiple narrative angles, detailed shot lists organized by scene and purpose, and complete assignment briefs with sourcing guidance. Each output ensures comprehensive emotional and contextual storytelling from first frame to final edit.
by manwithstyle
You'll receive data-driven recommendations for chart types, color schemes, visual hierarchies, and narrative structures tailored to your audience and message. This skill guides you through selecting encodings that accurately represent data while maximizing audience comprehension and engagement—whether you're designing publication-ready graphics or interactive dashboards.
by manwithstyle
You can rapidly evaluate public datasets to uncover newsworthy patterns and develop story angles backed by reproducible analysis. Claude helps you assess data quality, identify anomalies, generate multiple narrative angles, and document your methodology so editors and fact-checkers can verify your findings. Turn raw data into compelling stories faster than traditional research.
by manwithstyle
Analyze Docker container logs instantly to identify root causes of failures, crashes, and resource bottlenecks. Get actionable recommendations for resource allocation, network configuration, and architectural improvements that eliminate production issues before they cascade.
by manwithstyle
Quickly architect scalable, reusable Terraform modules that follow HashiCorp best practices and organizational standards. Get automated reviews that catch common pitfalls—variable naming, provider configuration, resource dependencies—before they reach production. Standardize your infrastructure-as-code across teams with instant feedback on module quality, security posture, and cost optimization opportunities.
by manwithstyle
Manage your entire story development pipeline—from assignment briefs and source research guidance to fact-checking verification and copy editing—all within Claude's context. You'll generate assignment templates, receive real-time editorial feedback, identify verification gaps, and receive copyediting suggestions with tracked changes. The skill handles complex multi-source stories, deadline pressure, and maintains editorial standards across your publication.
by manwithstyle
You can transform complex datasets into compelling interactive narratives that maintain coherence while inviting exploration. This skill helps you architect data-driven stories where insights unfold naturally through guided discovery points, keeping readers engaged without limiting their agency. Readers navigate your narrative with purpose, uncovering patterns and relationships that would remain hidden in static presentations.
by manwithstyle
Rapidly triage infrastructure incidents across all GCP services using guided diagnostic workflows, root cause decision trees, and remediation procedures. You get structured steps to isolate failures in Compute Engine, Cloud Run, Cloud SQL, networking, and storage, complete with gcloud commands, health checks, and rollback procedures.
by manwithstyle