A short routine.
COST
Total spend, in your own currency Largest line items Anything that grew unexpectedly Any alert that fired
RESOURCES
What is running, and whether it should be Test or temporary resources still active Storage growing
ACCESS
Login activity reviewed Anyone who left, removed Any new account created
EXPOSURE
Anything newly public Anything newly reachable externally
BACKUPS
Exports ran and are usable Nothing important exists only in one service
SERVICE HEALTH
Availability experienced Any incidents, and their causes
NOTICES
Provider emails read: deprecations, pricing, terms
WHAT TO RECORD
That the review happened, and anything found.
WHO DOES IT
One person, on a set date.