anmolnagpal

Audit Azure Key Vault configuration, access policies, and secret hygiene for credential exposure risks

Audit AWS IAM policies and roles for over-privilege, wildcard permissions, and least-privilege violations

Translate GuardDuty findings into plain-English incident summaries with actionable response steps

Map AWS environment against CIS, SOC 2, HIPAA, or PCI-DSS controls with prioritized remediation

Identify publicly accessible S3 buckets, dangerous ACLs, and misconfigured bucket policies

Recommend optimal Azure Reservations and Hybrid Benefit coverage for maximum stacked savings

Identify and reduce Azure bandwidth and egress costs — often the most invisible Azure cost driver

Review Terraform plans and HCL files for AWS security misconfigurations before deployment

Audit AWS Security Groups and VPC configurations for dangerous internet exposure

Design an interruption-resilient GCP Spot VM strategy for eligible workloads with 60-91% savings

Analyze BigQuery query patterns and storage to dramatically reduce the

Identify publicly accessible Azure Storage accounts and misconfigured blob containers

Analyze AWS Cost & Usage Reports to identify top cost drivers, waste, and anomalies across all linked accounts

Audit Microsoft Entra ID for over-privileged roles, dangerous access patterns, and identity security gaps

Detect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files

Detect AWS idle and zombie resources consuming cost with zero meaningful utilization

Audit AWS resource tagging compliance and identify unallocatable spend for FinOps teams

Optimize Azure dev/test environment costs with auto-shutdown schedules and Dev/Test pricing enrollment

Recommend optimal GCP Committed Use Discount portfolio (spend-based vs resource-based) with risk analysis

Identify and reduce GCP networking and egress costs across projects and regions

Use when bulk-managing Terraform modules at scale — upgrading providers across AWS, GCP, Azure, or DigitalOcean repositories, standardizing GitHub Actions wo...

Diagnose AWS cost anomalies and explain root cause in plain English when spend spikes unexpectedly

Interpret Microsoft Defender for Cloud Secure Score and generate a prioritized remediation roadmap

Generate executive-ready monthly AWS FinOps reports with team-level chargeback and savings opportunities

Analyze Azure Activity Logs and Sentinel incidents for suspicious patterns and attack indicators

Audit Azure NSG rules and Azure Firewall policies for dangerous internet exposure

Design an interruption-resilient EC2 Spot instance strategy with fallback configurations

Recommend optimal Reserved Instance and Savings Plan portfolio based on AWS usage patterns