DEMONSTRATION DOCUMENT
Sample deliverable - client and all figures are fictitious
DEMOR B.V.
GCP FinOps Audit - Technical Appendix
Contents
Project Inventory
A. Detailed Cost Savings Breakdown
B. Consolidated Savings Summary
C. Why Sequencing Matters
D. Open Questions
E. Implementation Phases
F. Ongoing FinOps
G. Risk Register
Project Inventory
| Project | Group | Primary Purpose |
|---|
| demor-platform-prod | platform | Production platform - 8 VMs, managed databases |
| demor-platform-test / demor-platform-acc | platform | Test & acceptance - 14 VMs running 24/7 |
| demor-api-prod / demor-api-test | api | Serverless API - 40+ services, test lanes always warm |
| demor-data-prod / demor-data-test | data | Data pipelines and warehouse |
| demor-ci | shared | CI runners - always-on build machines |
| demor-backups | shared | Backup storage - no lifecycle policies |
| demor-sandbox-* (5 projects) | sandbox | Developer experiments, several dormant |
A. Detailed Cost Savings Breakdown
A.1 Compute & Serverless
A.1.1 Serverless Test/Dev Services Held Permanently Warm
Projects: demor-api-test, demor-platform-test | Severity: HIGH | Saving: €550–820/month
52 test/dev services are configured to keep at least one instance warm 24/7; six more bill full compute around the clock for background connections. Test traffic does not justify either pattern, and several lanes in the estate already run the efficient configuration.
| Group | Services | Pattern | Est. Cost/mo |
|---|
| API test lanes | 24 | 1 vCPU / 1 GiB warm | €310 |
| UI test lanes | 18 | 1 vCPU / 512 MiB warm | €200 |
| Background/worker test lanes | 6 | Full compute, always on | €260 |
| Development previews | 4 | 1 vCPU warm | €50 |
| Total test/dev | 52 | | €820 |
Complexity: Low - a per-lane, reversible configuration change. The work is deciding which lanes qualify and validating them with the development team.
A.1.2 Test & Acceptance VMs Running 24/7
Projects: demor-platform-test, demor-platform-acc | Severity: HIGH | Saving: €450–940/month
18 VMs (≈ €1,540/month of compute) serve environments used at most a quarter of the hours in a month. Automatic calendars stop them outside working hours; disks and data are untouched.
| Schedule | Runtime | Saving |
|---|
| Office hours only (Mon–Fri) | 39% of current hours | ≈ €940/month |
| Weekend shutdown only | 71% of current hours | ≈ €450/month |
Complexity: Medium - overnight jobs and backup windows must be mapped before the calendar is applied; staged rollout starting with weekends.
A.1.3 CI Build Machines Idling Between Builds
Project: demor-ci | Severity: MEDIUM | Saving: up to €290/month
Two premium build machines (≈ €420/month) wait for jobs most of the day. On-demand build capacity created per job at Spot pricing is the standard end-state; build start latency must be validated.
A.1.4 Oversized Test Databases, Always On
Project: demor-platform-test | Severity: HIGH | Saving: €120–230/month
Two managed database instances sized like production (≈ €380/month combined) serve test around the clock. They can sleep out of hours, and their sizing deserves review against actual test load.
A.1.5 Committed Use Discounts - None Active
Billing account level | Severity: MEDIUM (high value) | Saving: €810–1,330/month
Zero commitments exist. The stable production baseline (≈ €2,900/month of compute) pays full on-demand rates.
| Option | Discount | Est. Saving/mo |
|---|
| 1-year commitment | ≈ 28% | ≈ €810 |
| 3-year commitment | ≈ 46% | ≈ €1,330 |
Critical sequencing dependency: size the commitment only after the optimisations above have removed non-production waste from the baseline. Committing early locks today's waste in for the full term.
A.1.6 Idle Resources
Severity: HIGH (quick win) | Saving: €120–220/month - disks attached to stopped VMs, 7 unused reserved IP addresses, and snapshot accumulation without retention bounds. Safe removal with rollback points kept.
A.2 Storage & Registry
A.2.1 Storage That Only Grows
Severity: MEDIUM | Saving: €90–180/month - 60% of 140 buckets have no retention or tiering rules, including multi-terabyte legacy content parked in the most expensive storage class. Retention obligations are confirmed before any rule is applied.
A.2.2 Container Image Registry
Severity: LOW | Build images grow with every release; keep-last-N cleanup policies cap the growth.
A.3 Governance & Security (Non-Cost)
- No billing export, budgets, or alert policies - anomalies surface only on the invoice
- Individual Owner/Editor grants instead of groups; over-privileged default service accounts
- Administrative ports open to the internet; databases with public IP addresses
- No resource labels - cost attribution by platform, environment, or team is impossible
- Dormant projects and shadow experiments outside governance
B. Consolidated Savings Summary
| # | Finding | Section | Low €/mo | High €/mo | Confidence |
|---|
| 1 | Serverless test/dev to zero | A.1.1 | 550 | 820 | High |
| 2 | VM calendars, test & acceptance | A.1.2 | 450 | 940 | High |
| 3 | Test databases | A.1.4 | 120 | 230 | High |
| 4 | Committed discounts | A.1.5 | 810 | 1,330 | Medium - sized post-optimisation |
| 5 | Idle resources | A.1.6 | 120 | 220 | High |
| 6 | Storage & registry | A.2 | 90 | 180 | Medium |
| | Total | | ≈ €2,140 | ≈ €3,720 | |
Reported range €2,900–3,900/month assumes the office-hours schedule and the 3-year commitment as the default recommendations.
C. Why Sequencing Matters
- Commitments last. Buying the discount while the test estate still runs 24/7 locks the inflated baseline into a multi-year contract.
- Right-size before committing. A discount on an oversized machine is a discount on waste.
- Retention before deletion. Storage rules follow documented retention requirements, not the other way round.
- Access hardening in the right order. Alternative admin access is validated before internet-facing ports close.
D. Open Questions
| # | Question | Value at Stake |
|---|
| 1 | Which test/dev lanes need instant response, if any? | €550–820/mo |
| 2 | Can test & acceptance sleep nights/weekends? Overnight jobs? | €450–940/mo |
| 3 | Test database usage pattern and sizing requirement? | €120–230/mo |
| 4 | Retention obligations for backups and legacy storage? | €90–180/mo + compliance |
| 5 | Commitment appetite: 1-year vs 3-year? | €810 vs €1,330/mo |
E. Implementation Phases
| Phase | Scope | Outcome |
|---|
| 1 - Visibility & Quick Wins | Billing export, budgets, idle cleanup, open questions | Cost truth + first savings |
| 2 - Non-Production Optimisation | Serverless to zero, VM calendars, database schedules | Bulk of savings realised |
| 3 - Commitments & Right-Sizing | Metrics review, stabilise, size and purchase | Discount on a clean baseline |
| 4 - Governance | Labels, group IAM, hardened access, review cadence | Savings that stay saved |
F. Ongoing FinOps
The patterns found here are regenerative - new test lanes ship warm, images accumulate, snapshots pile up. A monthly review cadence (dashboard, anomalies, commitment coverage, label compliance) keeps the estate lean.
G. Risk Register
| Risk | Likelihood | Impact | Mitigation |
|---|
| Cold starts frustrate developers | Medium | Low | Keep agreed lanes warm; reversible per lane |
| Schedules interrupt overnight jobs | Medium | Medium | Dependency mapping first; weekends-only rollout |
| Commitment over-sized | Medium | High | Purchase last, on a stabilised baseline |
| Deleting data under retention obligations | Low | High | Compliance confirmation before any rule |
| Admin lockout during hardening | Low | Medium | Alternative access validated first |
All data in this document is fictitious and for demonstration purposes. Prepared by Nextnovate CloudNextCare - FinOps assessment template.