This article is part of our Microsoft Licensing Knowledge Hub. See also our Microsoft Optimisation Services and Microsoft EA Optimisation Service.
Studies estimate that roughly 30 percent of cloud spend is wasted on idle or oversized resources. This playbook provides CIOs with a comprehensive framework for navigating Azure licensing models, selecting the right agreement structures, and implementing proven cost optimisation strategies — from migration planning through ongoing FinOps governance.
1. Azure Service Models: IaaS, PaaS, and SaaS Cost Implications
Before optimising Azure costs, CIOs must understand how the three fundamental service models — Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service — create fundamentally different cost structures and licensing responsibilities. The service model you choose for each workload determines not only your operational burden but also your exposure to licensing complexity, waste, and optimisation opportunities. For background on Microsoft Enterprise Agreement fundamentals, see our dedicated guide.
IaaS — Infrastructure-as-a-Service
You rent compute, storage, and networking but manage operating systems, middleware, and applications. OS and software licence costs are either included in pay-as-you-go rates or brought via Azure Hybrid Benefit. Maximum control but maximum responsibility for optimisation — oversized VMs and idle resources directly increase costs.
PaaS — Platform-as-a-Service
Azure manages the platform and infrastructure. Licence costs are bundled into the service price (for example, Azure SQL Database includes the SQL Server licence). Simpler licensing but rightsizing the service tier remains critical — over-provisioned PaaS instances waste money just as readily as oversized VMs.
SaaS — Software-as-a-Service
Fully managed applications (Microsoft 365, Dynamics 365) with per-user subscription pricing. No infrastructure to optimise, but licence count management and plan-level selection (E3 vs E5) are the primary cost levers. Shelfware — paying for unused SaaS seats — is the main waste source.
Service Model Selection Recommendations
- For commodity services (email, CRM), SaaS yields the lowest TCO. For custom applications, evaluate PaaS first to benefit from built-in licensing and managed scaling. Use IaaS only when you need full OS-level control or specialised configurations.
- Prefer PaaS for licensing simplicity: use Azure SQL Database instead of installing SQL Server on a VM wherever the use case allows — the service includes the licence and scales more efficiently.
- Right-size PaaS tiers aggressively: review utilisation metrics regularly and downgrade plans when usage does not justify higher tiers. Many Azure PaaS services allow tier changes with no downtime.
- Manage SaaS licence counts actively: implement processes to reclaim or reassign Microsoft 365 licences when employees leave or change roles.
2. Licensing Agreements: EA vs CSP vs MCA
The agreement structure under which you purchase Azure services has significant implications for pricing, flexibility, and cost governance. Enterprises can buy Azure under three primary contract vehicles, each with distinct trade-offs that CIOs must evaluate against their organisation's size, spend trajectory, and appetite for commitment.
| Aspect | Enterprise Agreement (EA) | Cloud Solution Provider (CSP) | Microsoft Customer Agreement (MCA) |
|---|---|---|---|
| Term & Commitment | 3-year contract; committed annual spend | Evergreen; no upfront commitment | Evergreen; no minimum commitment |
| Pricing | Volume discounts locked for term; price protection | Partner sets pricing; pay only for actual usage | List pricing; custom discounts negotiable for large spend |
| Billing | Annual billing with pre-purchased Azure credits | Monthly pay-as-you-go through partner | Monthly pay-as-you-go direct from Microsoft |
| Flexibility | Rigid during year; adjustments at anniversary only | Highly flexible — scale services as needed | Flexible; start/stop services without lock-in |
| Best For | Large enterprises with predictable, stable demand | Variable usage; organisations valuing agility | Mid-sized firms; EA transitions; direct Microsoft relationship |
EAs offer volume discounts and price protection in exchange for a three-year commitment. Underutilising your pre-purchased credits is the most common pitfall — you pay for committed capacity whether you use it or not. CSP provides monthly flexibility through a partner with no long-term commitment. MCA is a direct agreement with Microsoft — evergreen, no minimum, and capable of consolidating Azure, Microsoft 365, and Dynamics 365 under a single contract. For deeper guidance, see our Microsoft EA Negotiation Strategies and the complete guide to EA vs CSP.
Avoid Mixing Unintentionally: Different departments purchasing Azure through separate channels (one under EA, another via CSP) creates compliance risk and may prevent you from meeting EA commitments. Consolidate purchases strategically under a single agreement structure.
"The most expensive Azure agreement is the one that does not match your consumption pattern. An EA with underutilised credits wastes money through commitment; pay-as-you-go without reservations wastes money through missed discounts. Match the agreement to your reality, not your projections."
Redress Compliance, Microsoft Practice Advisory
Microsoft EA Optimisation Service →
Microsoft EA optimisation case study
3. Common Azure Cost Pitfalls and How to Avoid Them
Even with the right agreement and service models, organisations routinely encounter pitfalls that inflate Azure costs or create compliance exposure. Recognising these patterns is the first step toward systematic prevention.
High Impact: Over-Provisioned Resources
Deploying expensive VM SKUs "just in case" that run at 5 percent CPU utilisation, or using Premium SSD storage when Standard would suffice. Over-provisioning is the single largest source of cloud waste.
High Impact: Idle & Orphaned Resources
VMs left running 24/7 when not needed, orphaned disks remaining after VM deletion, unattached public IPs and load balancers silently accruing charges. These "forgotten" resources can accumulate thousands in monthly costs.
High Impact: Not Using Azure Hybrid Benefit
Enterprises with on-premises Windows Server and SQL Server licences paying full pay-as-you-go rates in Azure — effectively paying for the software licence twice. Failing to enable AHB is a direct loss of 30 to 50 percent savings on every eligible workload.
Medium Impact: No Cost Monitoring or Governance
Adopting Azure without budgets, alerts, or tagging standards. Without visibility, costs spiral until the invoice arrives. Missing cost governance is the root cause of "bill shock."
Pitfall Prevention Checklist
- Monthly orphaned resource audit: run Azure Advisor or custom scripts to identify unused VMs, unattached disks, and idle public IPs.
- Mandatory resource tagging: enforce tags (Environment, Owner, Project, CostCentre) via Azure Policy from day one.
- Budget alerts at 80 and 90 percent: configure Azure Cost Management alerts on every subscription and resource group.
- Team training on cloud billing: ensure developers and engineers understand how Azure resources are billed.
- Azure Policy enforcement: restrict deployment of oversized VM SKUs and require owner tags on all resources.
Microsoft Contract Negotiation Service →
4. Azure Hybrid Benefit: Leveraging Existing Licences
Azure Hybrid Benefit (AHB) is the single most powerful cost-saving lever available to enterprises with existing Microsoft on-premises licences. It allows you to apply your Windows Server and SQL Server licences (with active Software Assurance) to Azure resources, eliminating the software licence surcharge and paying only for base compute — at the same rate as a Linux VM.
Windows Server AHB
Applying AHB to a Windows VM reduces the hourly rate to the Linux-equivalent "base compute" cost, saving approximately 40 percent on Windows VM costs. Each Windows Server Datacenter licence covers two Azure VMs with up to 8 cores each (or one VM with up to 16 cores).
SQL Server AHB
SQL Server licensing is the most expensive component in many Azure deployments. AHB for SQL eliminates the licence surcharge on Azure VMs and reduces PaaS database costs (Azure SQL Database, Managed Instance) by 30 to 35 percent per vCore. For SQL Enterprise Edition, this represents thousands per month per instance.
Compliance Tracking
Every AHB-enabled resource must be backed by a corresponding on-premises licence with active Software Assurance. Overprovisioning AHB beyond your entitlement creates audit exposure. A critical nuance: Software Assurance provides dual-use rights for 180 days during migration. You can run the licence simultaneously on-premises and in Azure during the transition period. After 180 days, the licence must be assigned to one environment only.
- Inventory all eligible licences: maintain a central register of Windows Server and SQL Server licences including edition, core count, and Software Assurance status.
- Enable AHB on every eligible resource: use Azure Policy or deployment templates to default AHB to "On" for Windows and SQL workloads.
- Tag and audit AHB usage: run quarterly reconciliation reports to ensure AHB-enabled resource counts do not exceed your licence inventory.
- Renew Software Assurance proactively: lapsed SA forfeits AHB rights.
Microsoft Security Licensing Guide →
5. Reserved Instances and Savings Plans: Commitment-Based Discounts
For workloads that run consistently, Azure's pre-purchase options — Reserved Instances (RIs) and Savings Plans — offer substantial discounts in exchange for one-year or three-year commitments.
| Feature | Reserved Instances (RI) | Azure Savings Plans |
|---|---|---|
| Commitment Type | Specific VM type in a specific region | Fixed hourly spend across any compute |
| Maximum Discount | Up to 72% (3-year, upfront) | Up to 65% (3-year) |
| Flexibility | Instance size flexibility within VM family | Applies to any VM, container, or app service |
| Risk | Unused reservation = wasted spend | Under-consumption = wasted commitment |
| Best For | Known, stable workloads (production VMs, databases) | Variable workloads with predictable aggregate spend |
Optimisation Scenario: Combined AHB + RI Strategy — 80% Cost Reduction
An enterprise runs 50 Windows Server VMs (D4s_v3) 24/7 for production workloads. At pay-as-you-go rates, these cost approximately USD 11,000 per month. The team enabled Azure Hybrid Benefit (eliminating the Windows licence surcharge, saving ~40%) and purchased three-year Reserved Instances for all 50 VMs (saving an additional ~60% on the base compute rate). Result: monthly cost dropped from USD 11,000 to approximately USD 2,200 — an 80% reduction. Over the three-year RI term, total savings exceeded USD 316,000 on this single workload cluster alone.
Takeaway: AHB and RIs stack multiplicatively. For any production Windows or SQL workload running 24/7, the combination should be the default approach, not the exception.
6. Rightsizing and Resource Efficiency
Rightsizing — aligning cloud resources with actual workload requirements — is the most universally applicable optimisation technique. In on-premises environments, over-provisioning is standard practice. In Azure, every unit of excess capacity is a direct, measurable cost. Rightsizing is not a one-time exercise; it is an ongoing operational discipline.
Step 1: Analyse Utilisation Data
Use Azure Monitor metrics and Azure Advisor to identify resources with consistently low utilisation. A VM averaging 5 percent CPU and 20 percent memory over weeks is a clear candidate for downsizing. Azure Advisor automatically flags underutilised VMs and suggests smaller SKUs.
Step 2: Resize or Consolidate VMs
Azure allows changing VM sizes within the same family with minimal disruption. Moving an application from an 8-core to a 2-core VM when usage supports it can cut compute costs by 75 percent.
Step 3: Schedule Non-Production Shutdowns
Dev/test VMs running 24/7 when only needed during business hours represent 65 to 70 percent wasted capacity. Use Azure Automation or VM schedules to shut down non-production environments outside working hours.
Step 4: Right-Size PaaS Service Tiers
Rightsizing applies beyond VMs. If an Azure App Service Plan is running at 10 percent capacity on a Premium P2v2 tier, downgrade to Standard S1. Move multiple small databases into an Elastic Pool to share capacity efficiently.
Need Expert Azure Licensing Guidance?
7. Service-Specific Optimisation: Compute, Storage, Network, and Database
Each Azure service domain has distinct cost drivers and optimisation techniques. Addressing all four layers ensures no area of your environment is creating unnecessary expense.
Compute Optimisation
B-Series Burstable VMs are significantly cheaper than standard sizes for dev/test and low-CPU workloads. Azure Spot VMs use surplus capacity at 70 to 90 percent discounts — ideal for batch processing, QA environments, and any workload that tolerates interruption. Azure Functions and Logic Apps charge per execution rather than per hour; for infrequent tasks, serverless eliminates the base cost of an idle VM entirely. Azure Dev/Test subscriptions waive Windows licence costs on VMs — ensure all non-production resources are deployed in designated Dev/Test subscriptions.
Storage Optimisation
| Strategy | Implementation | Expected Impact |
|---|---|---|
| Tiered lifecycle policies | Auto-move blobs to Cool after 30 days, Archive after 180 days | 40 to 70% reduction on storage costs for ageing data |
| Right-size disk performance | Standard HDD for dev/test; Premium SSD for production IOPS | 50 to 80% savings on non-production disk costs |
| Orphaned disk cleanup | Monthly scans for unattached managed disks and snapshots | Eliminates 100% of cost from forgotten resources |
| Appropriate geo-redundancy | Use LRS/ZRS instead of GRS unless DR requirements mandate | ~50% reduction in redundancy premium |
| Reserved storage capacity | Pre-purchase 100+ TB blob capacity for 1 or 3 years | Up to 38% savings on large persistent datasets |
Network and Bandwidth Optimisation
Azure charges nothing for ingress but applies egress fees for data leaving Azure data centres. Co-locate dependent resources in the same Azure region to eliminate inter-region bandwidth charges. Cross-region data transfer can cost USD 0.02 to 0.05 per GB. Use Azure CDN for content delivery to cache static content at edge locations. If you regularly transfer terabytes out of Azure, an ExpressRoute circuit with unlimited data plan may be cheaper than metered internet egress.
Database and Analytics Optimisation
For intermittent database workloads, Azure SQL Database serverless tier auto-scales compute and pauses during inactivity — you pay nothing during idle periods. Multiple databases with varying usage patterns can share a single compute allocation through Elastic Pools. For Cosmos DB, use autoscale throughput instead of fixed provisioned RU/s.
8. FinOps Governance: Continuous Cost Management
Cost optimisation is not a one-off project — it is an ongoing operational discipline. Enterprises that treat cloud cost management as a continuous process, often called FinOps (Financial Operations), consistently achieve 20 to 30 percent lower Azure spend than organisations that optimise only at migration or renewal.
Free Assessment Tool: How ready is your organisation for its next Azure/EA renewal? Our free readiness assessment reveals savings opportunities and negotiation leverage.
- Monthly cost reviews with stakeholders: hold structured reviews with IT, finance, and application owners. Highlight anomalies, discuss optimisations completed and planned.
- Cloud cost scorecard: publish a monthly dashboard showing spend vs budget per department, top five savings actions taken, and top five unactioned recommendations.
- Cost estimates in deployment pipelines: integrate Azure Pricing Calculator API into infrastructure-as-code pipelines.
- Quarterly optimisation sprints: schedule dedicated periods where the sole focus is analysing and improving cost efficiency.
- Annual independent cost audit: engage external cloud cost consultants to benchmark your spend against peers and identify optimisations your internal teams may have missed.
"Cloud cost governance is not about restricting innovation — it is about ensuring that every pound spent in Azure delivers measurable business value. The organisations that embed cost awareness into engineering culture consistently outperform those that treat it as a finance exercise."
Redress Compliance, Azure FinOps Practice
MCA Explained: Is It Replacing EAs? →
9. Migration Planning vs Ongoing Optimisation
Organisations migrating to Azure face fundamentally different optimisation opportunities than those already operating in the cloud. The migration phase offers the chance to "do it right from the start" — avoiding the technical debt and over-provisioning that plague lift-and-shift approaches.
Migrating to Azure
Measure actual on-premises utilisation before selecting Azure resource sizes. Use Azure Migrate to right-size target VMs. Evaluate PaaS/SaaS modernisation for each workload. Plan AHB and RI purchases from day one. Set post-migration cost review milestones at 30, 60, and 90 days.
Already in Azure
Re-assess your licensing agreement at renewal. Conduct a thorough environment review for accumulated inefficiencies. Evaluate modernisation from IaaS to PaaS for mature workloads. Manage subscription sprawl through consolidation and central governance.
Migration Example: Right-Sized Migration — 45% Below Initial Projections
A financial services firm planned to migrate 200 on-premises servers to Azure IaaS. Initial estimates projected USD 85,000 per month in Azure compute costs. The firm measured actual CPU, memory, and storage utilisation across all 200 servers for 30 days before migration, right-sized target Azure VMs, enabled AHB for all Windows and SQL workloads, purchased one-year RIs for production servers, and modernised 30 workloads to PaaS services.
Result: Actual monthly Azure cost: USD 47,000 — 45% below initial projections. Annual savings of USD 456,000 compared to the naive lift-and-shift approach.
Teams Unbundling from Office 365 Playbook →
10. Why Independent Advisory Matters for Azure Optimisation
Azure licensing and cost optimisation involve a complex intersection of technical architecture, commercial agreements, and licensing compliance that most internal teams encounter only during major renewals or migrations. Independent advisory delivers value in three distinct areas.
Area 1: Agreement Negotiation
Independent advisors bring benchmark data from comparable Azure agreements across industries, enabling evidence-based negotiation of EA discounts, commitment levels, and contractual terms. Microsoft's sales team negotiates Azure agreements daily; your procurement team does it every three years. Independent expertise closes this information asymmetry.
Area 2: Licence Compliance & AHB
Advisors audit your licence estate to ensure AHB usage is fully compliant, identify entitlements your team may have missed, and prevent the compliance gaps that trigger audit exposure.
Area 3: Architecture Cost Review
Experienced cloud cost consultants identify architectural inefficiencies — unnecessary cross-region traffic, over-provisioned PaaS tiers, legacy VM families — that internal teams may have normalised over time. A fresh perspective often identifies 15 to 25 percent additional savings on mature Azure environments.
Redress Compliance maintains complete independence from Microsoft. We do not resell Azure services, hold Microsoft partner status, or earn referral commissions. This independence ensures our optimisation recommendations are exclusively aligned with your interests.
Frequently Asked Questions
The Enterprise Spend Navigator
Weekly insights on Azure pricing changes, Microsoft EA negotiation tactics, and licensing traps. Read by 4,000+ CIOs and procurement leaders.
Unsubscribe anytime. No spam.
Optimise Your Azure Licensing and Cloud Spend