An end to end AWS handover for a SaaS company in the Gulf, moving account ownership, access and operational knowledge from an outgoing vendor to the client's own team. Delivered as an independent engagement.

The problem

The client ran production on AWS but did not control the account. No root access, no billing visibility, no documentation, no reliable inventory of what was running or what it cost. The risk is rarely malice. It is attrition: the people who built it move on and the knowledge goes too.

What I did

Catalogued every resource and established real monthly cost. Transferred account and billing ownership, secured root with MFA. Rebuilt IAM on least privilege and removed vendor access in sequence. Verified DNS and TLS, and restored a backup rather than assuming one worked. Wrote runbooks and ran a live handover session.