How to Reduce AWS Costs Without Breaking Production: A Lead DevOps Engineer's Framework

Compute: Karpenter + Spot Orchestration + Graviton (Save 50-70%)

Transitioning your Kubernetes cluster from static EC2 Auto Scaling Groups to Karpenter with automated consolidation is the highest-impact cost reduction available on AWS.

• Bin-Packing & Defragmentation: Karpenter constantly monitors cluster density. When pods terminate or scale down, Karpenter automatically drains underutilized nodes and consolidates workloads onto smaller, cheaper instances.
• Spot Interruption Handling: By configuring diverse instance families (c6g, c6i, m6g, m6i, r6g), Karpenter selects from the deepest Spot capacity pools, reducing interruption frequency to under 1%.
• Graviton (ARM64): Switching instance types from c5.xlarge ($0.17/hr) to c7g.xlarge ($0.145/hr) yields an instant 15% price cut with 25% superior benchmark throughput.

# Karpenter NodePool configuration with multi-arch Spot diversification
apiVersion: karpenter.sh/v1beta1
kind: NodePool
metadata:
  name: general-workloads
spec:
  template:
    spec:
      requirements:
        - key: "karpenter.sh/capacity-type"
          operator: In
          values: ["spot", "on-demand"]
        - key: "kubernetes.io/arch"
          operator: In
          values: ["arm64", "amd64"]
        - key: "karpenter.k8s.aws/instance-category"
          operator: In
          values: ["c", "m", "r"]
        - key: "karpenter.k8s.aws/instance-generation"
          operator: Gt
          values: ["5"]
      disruption:
        consolidationPolicy: WhenUnderutilized
        consolidateAfter: 60s

Networking: Eliminate NAT Gateway Charges with VPC Endpoints

AWS charges $0.045 per GB processed through a NAT Gateway. In Kubernetes clusters pulling hundreds of gigabytes of container images daily from Amazon ECR and uploading logs/backups to Amazon S3, NAT charges frequently surpass EC2 costs.

aws ec2 create-vpc-endpoint   --vpc-id vpc-0a1b2c3d4e5f6g7h8   --service-name com.amazonaws.us-east-1.s3   --route-table-ids rtb-0123456789abcdef0 rtb-0987654321fedcba0

Traffic to S3 now stays entirely within the private AWS network backbone, instantly eliminating 100% of NAT data processing charges for S3 traffic.

Storage: Automate EBS gp2 to gp3 Migration (Instant 20% Cut)

General Purpose SSD (gp2) volumes charge $0.10/GB-month and tie IOPS performance to volume size. The modern gp3 standard charges $0.08/GB-month (20% less) and includes 3,000 baseline IOPS and 125 MB/s throughput for free, regardless of size.

# Find all legacy gp2 volumes in region
aws ec2 describe-volumes   --filters Name=volume-type,Values=gp2   --query 'Volumes[*].[VolumeId,Size,AvailabilityZone]' --output table

# Non-disruptively modify volume to gp3 on live production instances
aws ec2 modify-volume --volume-id vol-0123456789abcdef0 --volume-type gp3

S3 & Observability Pruning

Unpruned CloudWatch Logs and S3 buckets are silent profit killers:

• CloudWatch Retention: Default log retention is "Never Expire". Run an automated script to set all log groups to 14 or 30 days retention. Stream long-term audit logs to S3.
• S3 Intelligent-Tiering: Apply lifecycle policies transitioning objects older than 30 days to Intelligent-Tiering and older than 90 days to Glacier Flexible.
• Orphaned EBS Snapshots & Elastic IPs: Clean up unattached Elastic IPs ($0.005/hr) and snapshots of deleted AMIs.