Skip to main content
Back to All Whitepapers/FinOps & Cost Optimization
FinOps & Cost OptimizationMarch 8, 20262 min read

Cutting AWS Infrastructure Costs by 70%: An Architectural Guide

Practical strategies to audit and eliminate cloud waste, right-size compute, and adopt serverless container architectures.

SA

Sikander Ali

CTO & Cloud Lead

Executive Engineering Summary & Takeaways

  • Establish granular cost attribution using AWS Cost Allocation Tags and Athena CUR 2.0 queries before executing changes.
  • Decouple steady-state compute (covered by 3-Year Compute Savings Plans) from dynamic burst compute managed by Karpenter Spot pools.
  • Migrate container microservices to AWS Graviton3/Graviton4 (ARM64) for an immediate 20% to 40% price-performance improvement.
  • Eliminate NAT Gateway data processing taxes ($0.045/GB) by routing S3 and DynamoDB traffic through free Gateway VPC Endpoints.
  • Upgrade legacy EBS gp2 volumes to gp3 in-place to save 20% on baseline storage costs while obtaining 3,000 baseline IOPS for free.

1. Root Causes of Enterprise Cloud Bill Bloat

Cloud infrastructure costs rarely escalate because of a single catastrophic misconfiguration. Instead, monthly AWS bills creep upward through compounding systemic inefficiencies: static overprovisioning of compute resources to survive rare traffic spikes, unoptimized inter-AZ and NAT Gateway data transfer paths, neglected block storage volumes running legacy baseline IOPS, and a lack of programmatic lifecycle automation.

For engineering teams running high-throughput production workloads on AWS, slashing infrastructure spend is not about turning off staging servers on weekends. It requires an architectural overhaul: decoupling baseline and burst capacity, migrating compute runtimes to power-efficient custom silicon, eliminating data processing hops through VPC endpoints, and enforcing continuous FinOps guardrails as code.

2. Enforcing Cost Allocation Tags and FinOps Attribution

Optimization without strict cost allocation tags leads to accidental degradation of critical services. Every Terraform module must enforce mandatory tags (Environment, Service, Owner, CostCenter) at the AWS provider root level.

providers.tf
Terraform
provider "aws" {
  region = var.aws_region

  default_tags {
    tags = {
      Environment = var.environment
      ManagedBy   = "Terraform"
      Project     = "TechnoFreaks-Core"
      CostCenter  = var.cost_center
      Repository  = "github.com/technofreaks/infrastructure"
    }
  }
}

3. Compute Optimization: Graviton3/4 & Karpenter Spot Consolidation

Compute typically represents 65% to 80% of an AWS invoice. By combining AWS Graviton ARM64 architecture with Karpenter dynamic Spot instance diversification, compute costs can be reduced by 50% to 70% while maintaining sub-second autoscaling responsiveness.

Karpenter evaluates pending pod requirements directly and dynamically consolidates underutilized nodes when workloads scale down.

karpenter-nodepool.yaml
YAML
apiVersion: karpenter.sh/v1
kind: NodePool
metadata:
  name: general-compute
spec:
  template:
    spec:
      requirements:
        - key: kubernetes.io/arch
          operator: In
          values: ["arm64"]
        - key: karpenter.sh/capacity-type
          operator: In
          values: ["spot", "on-demand"]
        - key: karpenter.k8s.aws/instance-category
          operator: In
          values: ["c", "m", "r"]
        - key: karpenter.k8s.aws/instance-generation
          operator: In
          values: ["7g", "8g"]
      nodeClassRef:
        group: karpenter.k8s.aws
        kind: EC2NodeClass
        name: default
  disruption:
    consolidationPolicy: WhenEmptyOrUnderutilized
    consolidateAfter: 1m

4. Eliminating NAT Gateway Tolls with Free Gateway VPC Endpoints

AWS charges $0.045 per hour per NAT Gateway plus $0.045 per GB for all data processed. Routing internal S3 and DynamoDB traffic through NAT Gateways creates thousands of dollars in unnecessary egress costs.

Deploying free Gateway VPC Endpoints routes S3 and DynamoDB traffic directly across the AWS private backbone with $0.00 data transfer charges.

vpc-endpoints.tf
Terraform
resource "aws_vpc_endpoint" "s3_gateway" {
  vpc_id            = module.vpc.vpc_id
  service_name      = "com.amazonaws.us-east-1.s3"
  vpc_endpoint_type = "Gateway"
  route_table_ids   = module.vpc.private_route_table_ids

  tags = {
    Name = "technofreaks-s3-gateway-endpoint"
  }
}

5. Storage Modernization: EBS gp3 Online Upgrades & S3 Intelligent-Tiering

Upgrading legacy EBS gp2 volumes to gp3 delivers an immediate 20% cost reduction ($0.08/GB vs $0.10/GB) and decouples IOPS provisioning from volume size, providing 3,000 baseline IOPS for free.

Configuring S3 Intelligent-Tiering automatically moves historical objects to Infrequent and Archive Instant Access tiers, cutting long-term storage spend by up to 80% without operational overhead.

SA
Sikander AliFounder & CEO • CKA

Founder & CEO | Principal Cloud Architect, TechnoFreaks

Commercial FinOps PracticeTypical ROI achieved within 30 days • 35%–75% Spend Cut

Overpaying for AWS EKS Compute, NAT Gateways, or Idle Nodes?

Our senior cloud architects perform a comprehensive FinOps audit of your AWS estate to eliminate unneeded provisioned IOPS, configure automated Karpenter Spot consolidation, and enforce right-sized pod limits. We routinely reduce client AWS invoices by 35% to 75% without compromising production reliability.

Implement This in Production

Ready to Upgrade Your Cloud Infrastructure?

Book a 30-minute technical architecture review with our senior DevOps leads to assess your migration roadmap and infrastructure optimization.