A Cloud FinOps 90-day runbook for AWS, Azure, and GCP.
2026 industry research puts cloud waste between 25 and 35% of total cloud spend. Most of the waste is recoverable. Holding the savings is the hard part. This is a runbook, not a discussion: phases run in sequence, activities inside each phase in parallel. It assumes one FinOps lead, two cloud engineers, a named finance partner, executive sponsorship, and a signed savings target.
Three phases, thirteen weeks.
Phase 1, Quick Wins
Estate audit and baseline
Ingest AWS CUR, Azure Cost Management, and GCP Billing into one warehouse; 30 days of utilisation; top 20 cost drivers; baseline report plus a signed savings target in the SOW.
Idle and orphaned resource cleanup
Idle compute (under 5% CPU for 14 days), orphaned storage, zombie load balancers, idle databases, unused NAT gateways, unattached static IPs.
Rightsizing on compute
AWS Compute Optimizer, Azure Advisor, GCP Recommender; cross-check the business calendar; dev/test first; Kubernetes requests and limits via Kubecost.
Commitment optimisation
Audit RIs, Savings Plans, and CUDs (under 90% utilisation is a candidate); model the new posture against rightsized workloads; coverage target 70–80%.
Phase 2, Governance and Tagging
Tagging standard + enforcement architecture
Schema: Owner, CostCentre, Environment, Project, DataClassification. Enforcement layer: SCPs, Azure Policy, GCP Org Policy.
Tagging rollout
Auto-tag what can be auto-tagged, tickets for the rest, policy-as-code for new resources.
Cost attribution and showback
Showback dashboard at team and workload level; monthly to leadership and finance.
Commitment execution
Execute the Week 4 plan; schedule the first quarterly review.
Phase 3, Operating Model Rollout
Operating rhythm design
Weekly FinOps + engineering review, monthly finance + engineering forecast (variance over 10% triggers deeper review), quarterly commitment and tag-schema review; name the owners.
Anomaly detection and alerting
Native anomaly detection across the three clouds; service and team thresholds; an anomaly response runbook.
Engineering enablement
Enablement sessions; cost gates in the pipeline (Infracost or native); embed the dashboards.
AI workload hygiene
GPU and inference utilisation (30–50% is commonly over-provisioned); rightsize GPU, batch to spot, vector store and embedding sizing; review monthly.
Handover and retrospective
Handover to the Week 9 owners; final savings report; clean exit or a managed retainer.
Success at day 90
Realized savings vs the SOW (banked, not modelled) · tagging compliance above 90% · an operating cadence run by the client team with a named owner that survives partner exit. Two of three green is success; only one green means point-in-time savings without durable discipline.
Get the 7-page runbook
Includes the SOW template, savings calculator, tagging schema, and cadence template.
Want the runbook run for you, against a signed target?
The Cloud FinOps engagement writes the savings target into the SOW.