The challenge
Redundant per-account trails added avoidable cost and operational complexity to an AWS multi-account environment.
My contribution
- Contributed to consolidating CloudTrail logging to an organisation-level architecture.
- Helped retire redundant local trails where central logging satisfied the requirement.
- Supported governance and audit visibility while simplifying the design.
Approach
01Review CloudTrail configurations across the AWS account estate.
02Apply centralised organisation-level trail architecture where appropriate.
03Remove redundant local trail configurations while retaining required event coverage.
Outcome & impact
Reported cost savings from this work were £430,000. The figure is user-confirmed, but time period and attribution should be verified before public publishing.
Public case study: implementation details have been generalised to avoid disclosing private employer systems, source code, account identifiers or infrastructure configuration.