Marketplace

Use to audit and cut an OVHcloud bill: right-size flavors, tier cold data to Cold Archive, kill idle volumes/IPs, pick commitments, compare vs hyperscalers.

Use when provisioning or cost-tuning OVHcloud: Public Cloud instances, MKS Kubernetes, Object Storage, vRack, Octavia LB, Terraform, EU data residency.

Use when planning a provider-to-provider cloud migration: service equivalence map, egress cost model, cutover runbook, rollback plan and lock-in scoring.

Use when provisioning, hardening or cost-modelling Hetzner cloud and dedicated servers: hcloud, Robot API, private networks, floating IPs, backups.

Use when creating, updating, suspending or deleting Google Workspace users, groups, org units or licences at scale via the Admin SDK Directory API.

Use when auditing a Google Workspace tenant: admin roles, 2SV coverage, third-party OAuth grants, external Drive sharing and login anomalies.

Use when a task needs domain-wide Google Workspace API access (Directory, Reports, Gmail, Drive) and credentials are missing or returning unauthorized_client.

Use when building or hardening a GCP organization: folder/project hierarchy, Shared VPC, org policies, least-privilege IAM, log sinks, billing guardrails.

Use when onboarding, transferring, disabling or offboarding Microsoft Entra ID users, their group memberships and their licenses through Microsoft Graph.

Use when designing, staging or rolling out Microsoft Entra Conditional Access policies without locking the tenant out.

Use when a task needs Microsoft Graph access: register an Entra app, pick delegated vs application permissions, grant admin consent, authenticate.

Use when deploying or operating apps on DigitalOcean App Platform and Managed Databases: app specs, secrets, PRE_DEPLOY migrations, domains, scaling, cost.

Use when designing or migrating a workload onto Cloudflare's edge: Workers, R2, D1, KV, Durable Objects, Cache Rules, WAF, and origin cutover.

Use when applying or auditing an Azure landing-zone baseline: management groups, Azure Policy, RBAC, Defender for Cloud, budgets and Log Analytics.

Use when asked to audit, score, or harden an AWS account, Organization, or workload across the six Well-Architected pillars with evidence-backed findings.

Use when managing AWS S3, EBS, EFS, RDS or DynamoDB: buckets, encryption, lifecycle, snapshots, backups, restores and verified data migration.

Invoke to instrument or investigate a live AWS workload: CloudWatch alarms and metric math, Logs Insights, X-Ray traces, CloudTrail forensics, incident triage.

Design, build, and debug AWS VPC networking: subnets, routes, NAT/IGW, security groups vs NACLs, endpoints, peering/TGW, Route 53, ELB, plus a triage protocol.

Invoke to design, audit or debug AWS IAM: roles, trust policies, boundaries, SCPs, and pinpointing AccessDenied via policy simulator and CloudTrail.

Invoke to cut an existing AWS bill: find idle resources, unattached EBS, NAT egress, oversized instances and missing Savings Plans, with quantified savings.

Use to provision and operate AWS compute: EC2, AMIs, ASGs, ECS/Fargate services and Lambda — deploys, rollbacks, logs and right-sizing, with dry-run safety.

Invoke to drive AWS from the CLI or boto3: SSO login, assume-role, profiles, regions, pagination, JMESPath --query, waiters and dry-run-gated mutations.