anmolnagpal

Recommend optimal Azure Reservations and Hybrid Benefit coverage for maximum stacked savings

Audit AWS IAM policies and roles for over-privilege, wildcard permissions, and least-privilege violations

Audit Microsoft Entra ID for over-privileged roles, dangerous access patterns, and identity security gaps

Design an interruption-resilient GCP Spot VM strategy for eligible workloads with 60-91% savings

Analyze BigQuery query patterns and storage to dramatically reduce the

Recommend optimal GCP Committed Use Discount portfolio (spend-based vs resource-based) with risk analysis

Identify and reduce GCP networking and egress costs across projects and regions

Use when bulk-managing Terraform modules at scale — upgrading providers across AWS, GCP, Azure, or DigitalOcean repositories, standardizing GitHub Actions wo...

Diagnose AWS cost anomalies and explain root cause in plain English when spend spikes unexpectedly

Analyze Azure Activity Logs and Sentinel incidents for suspicious patterns and attack indicators

Interpret Microsoft Defender for Cloud Secure Score and generate a prioritized remediation roadmap

Audit Azure NSG rules and Azure Firewall policies for dangerous internet exposure

Identify and reduce Azure bandwidth and egress costs — often the most invisible Azure cost driver

Audit AWS Security Groups and VPC configurations for dangerous internet exposure

Review Terraform plans and HCL files for AWS security misconfigurations before deployment

Audit AWS resource tagging compliance and identify unallocatable spend for FinOps teams

Detect AWS idle and zombie resources consuming cost with zero meaningful utilization

Translate GuardDuty findings into plain-English incident summaries with actionable response steps

Map AWS environment against CIS, SOC 2, HIPAA, or PCI-DSS controls with prioritized remediation

Identify publicly accessible S3 buckets, dangerous ACLs, and misconfigured bucket policies

Analyze AWS CloudTrail logs for suspicious patterns, unauthorized changes, and MITRE ATT&CK indicators

Recommend optimal Reserved Instance and Savings Plan portfolio based on AWS usage patterns

Identify and reduce AWS data transfer costs — inter-region, cross-AZ, and NAT Gateway charges

Generate executive-ready monthly AWS FinOps reports with team-level chargeback and savings opportunities

Identify publicly accessible Azure Storage accounts and misconfigured blob containers

Detect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files

Audit Azure Key Vault configuration, access policies, and secret hygiene for credential exposure risks