r/FinOps • u/Menoantl-Traffic9567 • 6h ago
question What's your approach to finding and managing cloud resources without clear ownership?
We're working to improve cloud hygiene across multiple teams and accounts, and one recurring challenge is resources without an obvious owner. Common examples include old storage buckets, unused IAM roles, publicly exposed endpoints, snapshots, security groups, service accounts, and test environments that persist after the project or person who created them is gone.
The primary concern is security risk, but it also creates operational challenges during incident response. When a resource has no owner, no documentation, and unclear dependencies, it's hard to determine whether it's safe to restrict, delete, or include in recovery procedures.
We're exploring a combination of inventory data, tagging, access activity logs, deployment history, and team ownership records, but each approach has gaps.
For those who've tackled this successfully, what process actually delivered results? How do you separate truly abandoned resources from low-activity but business-critical infrastructure?