AWS Consulting
We audit existing AWS estates, design architectures that hold, and bring costs back under control. Short, scoped engagements run by the two of us, based in Lyon.
AWS consulting is often sold as a presentation. Here it is something that runs: an account structure that isolates what should be isolated, a documented network, a bill that went down, and a team that knows why things are the way they are.
We are usually called in at one of three moments. An AWS estate has grown faster than its governance. An architecture will not survive the next scale-up or the next audit. Or the bill has drifted and nobody can say exactly where.
We do not stay for months. A consulting engagement usually runs from a few days to a few weeks, produces something usable, and ends. If you then want us to operate what we designed, that is our managed services work, and it is a choice rather than a condition.
Every one of these has been delivered in production for the clients whose case studies are further down this page.
AWS Organizations, service control policies, Network Firewall, AWS Backup, CloudFormation StackSets. We have structured estates of several hundred accounts, with centralised security policy and guardrails that do not stop delivery teams from working.
Firewall Manager, GuardDuty, Security Hub, VPC Flow Logs, least-privilege IAM, encryption, secrets management. We also get estates ready for audit: traceability, isolation, retention and the evidence auditors ask for.
VPC design, Transit Gateway, PrivateLink, Direct Connect, Site-to-Site VPN, DNS, hybrid interconnects. This is the most expensive layer to redo after the fact, and the one where an Advanced Networking specialty earns its keep.
Line-by-line bill analysis, right-sizing, Savings Plans, storage lifecycles, switching off what nobody uses. In most cases the savings pay for our engagement within the first few months.
EC2, ECS and EKS sizing, Docker image optimisation, instance boot-time tuning, Auto Scaling fine-tuning, traffic spike handling, Aurora and RDS tuning, caching. The goal is to absorb the peak without paying for the peak all year.
AWS Backup, group-level backup strategy, RPO/RTO targets aligned with client constraints, retention policies, recovery plans that have actually been tested. Backup as a service that dozens of delivery teams can consume without each becoming a specialist.
Four steps, and you talk to the same two people at every one of them.
An hour with the architect who will do the work. We tell you plainly whether the subject is ours, and if it is not, who in the Cloud Partners collective is better placed.
Read access to your estate, analysis, written findings. You get a list of problems ranked by cost and risk, not an eighty-page report.
We implement what was decided, as infrastructure as code where that makes sense, with your team in the loop rather than watching.
Documentation, transfer, and a session explaining the decisions. You have to be able to carry on without us.
We are based in Lyon and travel to clients on site, in France or abroad, whenever it helps. For an audit or an architecture workshop, being in the same room saves weeks. We also work remotely with clients across Europe and internationally, which is how about half our engagements run.
Both. We have structured the AWS estate of an international software vendor running several hundred accounts and, the same year, rebuilt the infrastructure of a thirty-person company. What matters is that the problem is technical and that the person deciding understands what is at stake.
We bill by the day, with no commercial tiers and no setup fee. An estate audit is typically a handful of days. We give you a range in the first conversation and we stick to it.
The AWS partnership is held by Cloud Partners, the collective of ten certified experts we belong to. OneScale contributes to it but is not itself the partner, and we would rather say so plainly than leave the ambiguity in place.
We bring in the right person from the collective for the job, and we tell you who and why. What we never do is subcontract your project to a team you did not choose.
That is the most common case. Most of our engagements start on an existing estate, often built under time pressure by people who have since moved on.
We design and build platforms on AWS, from the first framing session to the run phase. Two people, code we stand behind, and an architecture built to be handed over.
Hosting on AWS, on-call, monitoring, application and infrastructure maintenance, and continuous cost control. We bill infrastructure in euros, and we answer when it rings.
Write to us directly. No salesperson, no qualification call. One of us two replies, within 24 hours.
We reply within 24 hours, and it is one of us who replies.
Based in Lyon, working with clients in France, across Europe and internationally.