Continuing from where we left off with the B2B SaaS account

Day three: we started making changes. We had the map. We had the findings. We had write access. We had a rollback plan for each change and a monitoring window defined in advance

First change: delete the unused OpenSearch cluster

Confirmed with the CTO that nobody was using it and nobody planned to use it. Deleted. Immediate: $800 a month gone

Second change: set retention policies on CloudWatch log groups

43 log groups. Most had no retention policy. We set 30 days on application logs, 90 days on infrastructure logs, 365 days on audit logs. Deleted three log groups receiving data from services that no longer existed. Reduced the data volume on two log groups by changing log levels from debug to info

CloudWatch went from $2,400 to $380 a month

Third change: RDS rightsizing

Two of the three RDS instances were running at under 20 percent CPU and under 30 percent memory. We moved both from db.r5.2xlarge to db.r5.large.…