## **Take Control** - [ ] Periodically audit your resources. Take inventory and check if you need all the resources and services you have created. It is easy to start things in the cloud and then lose track. This includes: EC2 instances, RDS databases, ELBs, snapshots, ECS tasks, VPCs, security groups, etc. [Howto](https://aws.amazon.com/config/). - [ ] Use resource tags consistently to categorize resources and track back to the owning team. [Howto](https://aws.amazon.com/about-aws/whats-new/2014/01/29/track-and-manage-instance-use-and-spending-with-new-ec2-usage-reports/). [Howto](https://aws.amazon.com/answers/account-management/aws-tagging-strategies/). - [ ] Run development, test and staging environments in their own accounts -- separate from production. This makes it much easier to control cloud resources and is also more secure. Use [AWS Organizations](https://aws.amazon.com/organizations/) to consolidate billing. [Howto](https://aws.amazon.com/organizations/). - [ ] Prices can vary considerably across regions. For example: an AWS On-Demand M4.large is $73/month in us-east-1 and $91/month in ap-southeast-2. Choose the cheapest region that is closest to your customers. [Howto](https://aws.amazon.com/ec2/pricing/on-demand/). - [ ] Run AWS Trusted Advisor regularly (perhaps quarterly) to check for excess capacity and security issues. [Howto](https://console.aws.amazon.com/trustedadvisor/home?#/dashboard). - [ ] Enable billing alerts at 25%, 50% and 75% of your expected monthly budget. That way you’ll quickly be alerted when something gets out of control. [Howto](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/gs_monitor_estimated_charges_with_cloudwatch.html). ## **Instances** - [ ] Choose and re-evaluate the instance type for each application. Instance types can vary in price by orders of magnitude. [Howto](https://www.ec2instances.info/). - [ ] Migrate to the newer instance types. AWS often encourages movement to newer instances types by price. For example: M5.large is $70 in us-east-1 whereas M4.large is $73 in the same region. - [ ] Monitor your application performance by CPU, memory and disk to locate excess capacity and the opportunity to downsize the instance type and attached storage requirements. - [ ] Spot instances are usually the cheapest instances available and can be up to 80% less than the On-Demand price. But Spot servers are ephemeral and can be terminated with little warning. Use Spot instances for variable, non-base capacity. Spot pricing is cheapest after hours and on weekends in most regions. Be prepared for AWS to reclaim all your Spot instances. [Howto](https://console.aws.amazon.com/ec2sp/v1/spot/launch?region=us-east-1), [Howto](https://aws.amazon.com/ec2/spot/instance-advisor/). - [ ] Your unvarying On-Demand production capacity can be on reserved instances if not using Spot instances. Pre-pay if possible to lock in the lowest price. Check your bill to make sure you are using all your purchased reserved instance capacity. [Howto](https://console.aws.amazon.com/ec2/v2/home?region=us-east-1#ReservedInstances:sort=reservedInstancesId). - [ ] Alternatively, use an AWS Savings Plan to reduce costs up to 70% in exchange for a 1-3 year term commitment on EC2 or Fargate. [HowTo](https://aws.amazon.com/savingsplans/pricing/). ## **Scaling** - [ ] Scale your Auto Scale groups and database replicas based on load rather than over-provisioning. Consider scaling up if CPU is greater than 60% for 5 minutes and scale down if less than 30% for 20 minutes. [Howto](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scale-based-on-demand.html), [Howto](https://aws.amazon.com/autoscaling/). - [ ] Power down all idle resources. Evaluate when your dev, test and staging environments are not required. You can save up to 70% off your cloud bill via this step alone. - [ ] Terminate unused ELBs. Use [Terraform](https://www.terraform.io/) to destroy and re-create as required. - [ ] If using containers, you can reduce your total instance count by packing containers to maximize your CPU and memory utilization on server/cluster instances. ## **Serverless** - [ ] Use serverless patterns for event based services that have peaky load. You don't pay for idle time with serverless or for managing the server. - [ ] Don't use serverless for constant, heavy loads. Serverless can be up to 3 times more expansive to operate than a dedicated server for such workloads. [Howto](https://medium.com/@PaulDJohnston/when-not-to-use-serverless-jeff-6d054d0e7098). ## **Network Traffic** - [ ] Reduce the network traffic from your instances by caching static content at the edge. Consider [CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html), [CloudFlare](https://www.cloudflare.com/) and other edge caching services. - [ ] ELBs are expensive especially if you use one ELB per microservice. You can share a single ALB over multiple services by using different target rules and it works for SSL with multiple certificates. [Howto](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-target-groups.html). - [ ] Design your deployments to minimize inter-region and inter-zone traffic if you have very high outbound network data rates. Using multiple AZs is essential for availability, but try to localize traffic within the AZs. [Howto](https://datapath.io/resources/blog/what-are-aws-data-transfer-costs-and-how-to-minimize-them/). ## **Storage** - [ ] S3 storage can grow over time to be a significant cost. Have policies to regularly examine unwanted S3 storage. - [ ] Scan for orphaned EBS snapshots and detached EBS volumes. These often accumulate over time as unattached volumes are not automatically deleted when some instances are terminated. - [ ] Migrate rarely accessed S3 data to [AWS Glacier](https://aws.amazon.com/glacier/). Retrieval is slower, but much less expensive. [Howto](https://www.online-tech-tips.com/computer-tips/how-to-move-amazon-s3-data-to-glacier/). - [ ] Set an expiry limit for all CloudWatch logs. The default is to never expire. [Howto](https://console.aws.amazon.com/cloudwatch/home?#logs:). ## **Automate** - [ ] Invest early in tools and automation -- people are expensive. Using the console is great for prototyping, but the payoff for automation in the cloud is large. Automate resource creation, auditing, centralized logging, and security scanning. - [ ] Use an automation tool such as [CloudFormation](https://aws.amazon.com/cloudformation/) or [Terraform](https://www.terraform.io/) instead of creating infrastructure manually. This is not only much more secure, but it makes controlling and auditing resources much easier. [Howto](https://blog.gruntwork.io/an-introduction-to-terraform-f17df9c6d180). - [ ] Leverage the 90+ AWS services before reinventing the wheel. AWS building blocks can often be used to get you a solution more quickly and at lower cost than you could by building it yourself. ## **Moving** - [ ] Consider other cloud providers. While overall, AWS may be competitive, you may find alternate cloud providers such as [Azure](https://azure.microsoft.com) and [Google Cloud](https://cloud.google.com/) are significantly cheaper for your specific workload. - [ ] Know when to leave the cloud. At large consistent scale, on-premises hosting may be preferable to cloud hosting for some some services. [Dropbox](https://dropbox.com/) and [Stack Overflow](https://www.stackoverflow.com/) migrated services from the cloud for this reason.