Executive summary
AWS market intelligence is not a database of domains that resolve to an Amazon service. Public infrastructure clues rarely reveal the workload, account structure, business owner, data classification, architecture, cost allocation, or decision timing. A qualified cloud opportunity requires a verified job, a serviceable workload, an accountable buying group, and evidence that the proposed change can improve an outcome without creating unmanaged risk.
Amazon's fiscal 2025 Form 10-K reports that AWS sales increased 20% year over year to $128.7 billion. It also reports AWS operating income of $45.6 billion for the year. (Amazon fiscal 2025 Form 10-K) These audited segment results establish scale and growth at the provider level. They do not estimate a partner's obtainable market, identify individual customers, or prove cloud readiness.
This playbook builds opportunity intelligence around workload and organizational evidence: business trigger, architecture, operations, security, cost, sustainability, skills, stakeholder authority, and a measurable proof path.
Define the market as a set of cloud jobs
“AWS services” is too broad for useful targeting. Define a repeatable job and the conditions under which your team can deliver it.
Common jobs include:
- assess cloud readiness and create a prioritized roadmap;
- migrate or modernize a bounded application portfolio;
- improve reliability and recovery for a critical workload;
- establish landing-zone, identity, network, and account governance;
- reduce unallocated or inefficient cloud spend;
- modernize data, analytics, or AI infrastructure;
- strengthen observability, incident response, or software delivery;
- operate a workload through a managed service.
For each job, set boundaries for region, sector, data class, architecture, scale, required certifications, delivery model, minimum and maximum scope, and skills. An account is attractive only when its workload fits the service.
Model intelligence at workload level
An enterprise may have hundreds of accounts and workloads at different maturity levels. Record the cloud opportunity as a graph:
- Business capability: product, customer journey, internal function, mission, and accountable executive.
- Workload: application and data components, users, criticality, dependencies, service objectives, and lifecycle state.
- Cloud environment: organization and account structure, Regions, network, identity, guardrails, deployment path, and services where verified.
- Operating system: owner, on-call, observability, incidents, changes, capacity, backup, recovery, and support.
- Economics: allocation, budget, usage drivers, commitments, forecast, anomalies, unit measures, and optimization backlog.
- Risk and compliance: data classification, legal duties, threats, controls, evidence, exceptions, suppliers, and residual risk.
- Decision system: buying group, partner roles, budget, procurement, decision gates, incumbent contracts, and target date.
Attach source, date, and confidence to each fact. A hiring post for a cloud engineer may indicate activity; it does not reveal the target architecture or an intent to outsource.
Use Well-Architected as a common evidence frame
The AWS Well-Architected Framework organizes guidance across six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability. (AWS Well-Architected Framework) Use the pillars to structure discovery, not to declare an architecture compliant after a sales call.
Operational excellence
Ask how the workload is deployed, observed, changed, supported, and improved. Review ownership, runbooks, alarms, incident learning, release safety, and operational toil.
Security
Map identity, permission boundaries, secrets, network paths, data protection, detection, incident response, vulnerability handling, and evidence. Identify who accepts residual risk.
Reliability
Define business criticality, dependencies, recovery time and recovery point objectives, failure modes, quotas, capacity, backup, restore testing, and dependency resilience.
Performance efficiency
Measure user and system requirements, not generic utilization. Review architecture choices, load patterns, latency, throughput, scaling, and test evidence.
Cost optimization
Link spend to owners, products, environments, and units of value. Distinguish negotiated rate, utilization, architecture, waste, and demand. Savings without an operating change may not persist.
Sustainability
Evaluate workload demand, utilization, data movement, retention, architecture, and lifecycle decisions. Avoid unsupported claims about environmental outcomes; use available workload and provider data with explicit boundaries.
Score each pillar 0–4 with linked evidence. Do not average away a mandatory security or recovery failure.
Make shared responsibility visible
AWS describes security and compliance as shared responsibilities. AWS protects the infrastructure that runs its cloud services, while customer responsibilities vary by the services selected and include areas such as data, identities, configurations, guest operating systems, and applications. (AWS shared-responsibility model)
Translate that general model into a workload-specific responsibility matrix. For each control or operating task, name the provider, customer, partner, software vendor, and approver. Cover at least:
- identity lifecycle and privileged access;
- operating-system and application patching;
- network and service configuration;
- data classification, encryption, backup, and deletion;
- application security and software supply chain;
- logging, alerting, incident response, and notification;
- resilience testing and recovery;
- cost allocation, budgets, and anomaly response;
- evidence collection and exception management.
“AWS handles security” and “the customer owns everything in the cloud” are both too crude. Responsibilities change by service and architecture. Record them before estimating delivery or signing a managed-services agreement.
Detect opportunities through verified change and friction
Useful signals combine a dated event with a measurable consequence:
| Signal | Hypothesis | Proof required |
|---|---|---|
| data-center or contract milestone | migration decision window | affected workloads, economics, dependencies, authority |
| acquisition or divestiture | account and workload separation | transitional services, identity, data, target operating model |
| public product growth | scaling or reliability work | demand pattern, service objectives, bottleneck, owner |
| cloud-cost initiative | FinOps or architecture need | allocation coverage, cost drivers, backlog, accountable teams |
| security or audit finding | control remediation | exact finding, scope, evidence standard, due date |
| AI program | data and compute platform demand | use case, data rights, model path, evaluation, cost limits |
Do not manufacture urgency from a general industry trend. Advance when the account confirms the job, consequence, timing, and authority.
Build the cloud buying group
The executive sponsor owns business value and risk. Application owners own service outcomes. Platform engineering owns the shared environment. Security, privacy, and compliance own requirements and risk decisions. Finance and FinOps own allocation, planning, and economic governance. Procurement and legal own contractual process. Data and AI teams own data fitness and model operations. Developers and operations teams determine whether the target state is usable. Partners may own migration, software, operations, or resale.
For every role, capture desired outcome, feared failure, decision right, requested evidence, current position, relationship owner, and next action. A technical enthusiast is not necessarily a budget owner, and a central platform sponsor may not control an application team's roadmap.
Turn cloud cost into a governed workflow
AWS describes Cloud Financial Management capabilities for organizing and tracking cost and usage, budgeting and forecasting, and identifying resource and pricing optimization opportunities. (AWS Cloud Financial Management) Tools produce recommendations; organizations create durable outcomes.
Build a closed-loop workflow:
- allocate cost to accountable owners and business dimensions;
- detect anomalies and material changes;
- explain the driver—demand, price, waste, architecture, or error;
- propose an action with service and risk impact;
- obtain technical and financial approval;
- implement with rollback where appropriate;
- verify realized savings and performance;
- update the forecast and architecture backlog.
Measure allocated-spend coverage, forecast variance, anomaly response, recommendation age, realized versus estimated savings, and unit economics. Do not count an unimplemented recommendation as savings.
Qualify readiness and run a bounded proof
Score business ownership, workload evidence, architecture visibility, operating maturity, security readiness, economic baseline, skill capacity, and commercial path from 0 to 4. Require artifacts or interview evidence. Apply hard gates for prohibited data, absent owners, unachievable objectives, unsafe access, unresolved dependencies, and unsupported operating commitments.
Test the riskiest assumption through a bounded assessment, migration wave, recovery exercise, performance test, policy deployment, or cost-optimization change. Define representative scope, baseline, access, success measures, failure criteria, rollback, effort, and decision date.
At close, report observed results, limitations, exceptions, residual risk, production requirements, expected operating cost, and customer responsibilities. A successful proof is evidence for a decision, not proof that every workload will behave the same way.
The AWS Workload Opportunity Radar
Actionable checklist
- Define one repeatable cloud job and its service boundaries.
- Model opportunities at workload, not logo, level.
- Attach source, date, and confidence to every material signal.
- Assess all six Well-Architected pillars with evidence.
- Create a workload-specific shared-responsibility matrix.
- Map business, application, platform, security, finance, and procurement roles.
- Establish service, risk, and cost baselines before proposing change.
- Separate estimated savings from verified realized savings.
- Apply hard gates before advancing or estimating.
- Test the highest-risk assumption with representative scope.
- Document proof limits, residual risks, and production duties.
- Feed workload outcomes and delivery economics back into targeting.
Frequently asked questions
Does an AWS technology signal prove a migration opportunity?
No. It proves possible relevance at most. Verify workload ownership, business objective, current architecture, decision timing, funding, risk, and partner path.
Should every workload receive the same cloud assessment?
No. Tailor depth to criticality, data, complexity, change, and decision consequence while using a consistent evidence framework.
Who owns security in AWS?
AWS and the customer have different responsibilities that vary by service. Partners and software vendors may also have duties; document the exact division for each workload.
Is a cost-optimization recommendation the same as savings?
No. Savings are realized only after an approved change is implemented and verified without unacceptable service, security, or delivery impact.
What makes an AWS proof credible?
Representative scope, a measured baseline, explicit success and failure criteria, controlled access, rollback, documented effort, and honest limitations.
Coordinate AWS workload opportunities in Arches CRM
Arches CRM can connect account and workload records, dated triggers, stakeholder roles, evidence requests, readiness scores, proof results, partner tasks, proposals, and next actions. It supports commercial coordination while cloud architecture, security, operations, and cost tools remain authoritative for technical data.
Next step: Select one cloud job, define its hard gates and evidence model, then qualify 15 workloads rather than 15 logos.
Download the branded PDF edition
Get the complete Arches CRM whitepaper with its cover, infographic, checklist, references, and implementation guidance. Required fields help us deliver relevant follow-up; marketing consent is optional.
Sources and further reading
Put the insight into one accountable sales system
Arches CRM helps teams capture leads, keep every conversation, assign the next action, and move opportunities from first contact to close.
Start your 7-day trial
