AWS Handover for SaaS Company

An end to end AWS handover for a SaaS company in the Gulf, moving account ownership, access and operational knowledge from an outgoing vendor to the client's own team. Delivered as an independent engagement.

The client ran production on AWS but did not control the account. No root access, no billing visibility, no documentation, no reliable inventory of what was running or what it cost. The risk is rarely malice. It is attrition: the people who built it move on and the knowledge goes too.

Catalogued every resource and established real monthly cost. Transferred account and billing ownership, secured root with MFA. Rebuilt IAM on least privilege and removed vendor access in sequence. Verified DNS and TLS, and restored a backup rather than assuming one worked. Wrote runbooks and ran a live handover session.

The client owns their account outright, operates from documentation rather than memory, and has no residual vendor dependency.