What Config Drift Costs You: CloudWatch Log Retention, S3 Lifecycle Policies and RDS Multi-AZ, Priced

Three settings nobody revisits after provisioning, priced: log groups that never expire, buckets that never tier, and Multi-AZ in the wrong places. Every one is a five-minute fix with a compounding payoff.