Home / AWS Consulting
AWS Consulting

AWS Consulting: Architecture You Can Build and Operate

Independent design, review and hands-on build for AWS, from a first landing zone to securing and tuning a production workload.

AWS consulting is most useful at three points: before you build, when something feels fragile or expensive, and when you are preparing to scale. We give you a clear picture of where you are, what to change first and how to build it.

Our recommendations come with working implementation: Terraform code, pipelines and runbooks, not just slide decks. For ongoing operation after the project, see AWS managed services.

Ways we can help

Architecture design

A target architecture for a new or growing workload, with the trade-offs explained.

Well-Architected review

A structured review of an existing workload against AWS's six pillars.

Security review

Who can do what, what is exposed to the internet and where secrets live.

Cost optimization review

What you pay for and do not use, and what to right-size or retire.

Migration planning

What to move, in what order and with what rollback. See cloud migration.

Build and handover

We implement the design in Terraform and hand over documentation and runbooks.

How we review a workload

The AWS Well-Architected Framework organises good practice into six pillars. We use it as a checklist of questions, then turn the answers into a prioritised list rather than a long report.

PillarQuestions we ask
Operational excellenceIs everything deployed from code? Can you roll back? Who is alerted when it breaks?
SecurityWho can do what? What is public? Where are secrets stored and who can read them?
ReliabilityWhat happens if an instance or an Availability Zone fails? Are backups restored in practice?
Performance efficiencyIs capacity matched to load? Is each service the right fit for its job?
Cost optimizationWhat are you paying for that is not used? Which resources are oversized?
SustainabilityCan the same work run on fewer or smaller resources?

What you receive

Start with remote state

One of the first things we set up on any new build is remote, locked Terraform state, so more than one person can change infrastructure safely.

Example: Terraform S3 backend
terraform {
  backend "s3" {
    bucket       = "example-tfstate"
    key          = "prod/network/terraform.tfstate"
    region       = "ap-south-1"
    encrypt      = true
    use_lockfile = true # S3-native state locking in recent Terraform versions
  }
}

How a consulting project runs

  1. 1

    Discovery call

    We learn what the workload does, what worries you and what you want to achieve.

  2. 2

    Access review

    A read-only role is enough for a review. Build work uses scoped permissions.

  3. 3

    Findings and plan

    You get prioritised findings and a recommended design.

  4. 4

    Build

    We implement the agreed changes in code, with you reviewing each step.

  5. 5

    Handover

    Documentation, runbooks and a walkthrough, so your team can run it.

FAQ

Common questions

Something else on your mind? Message us and an engineer will answer.

Ask a Question

A read-only role is enough for reviews. For build work we use roles scoped to what is being changed.

It depends on size. A review of a single workload is typically days rather than weeks.

AWS is our main focus, and we also work with Azure, GCP and other major cloud platforms.

Yes. We can build the design, migrate workloads and then operate the result.

Related services

Planning an AWS build or review?

Describe the workload and we will suggest the right engagement.