Studies estimate that roughly 30 percent of cloud spend is wasted on idle or oversized resources. This playbook provides CIOs with a comprehensive framework for navigating Azure licensing models, selecting the right agreement structures, and implementing proven cost optimisation strategies — from migration planning through ongoing FinOps governance.

1. Azure Service Models: IaaS, PaaS, and SaaS Cost Implications

Before optimising Azure costs, CIOs must understand how the three fundamental service models — Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service — create fundamentally different cost structures and licensing responsibilities. The service model you choose for each workload determines not only your operational burden but also your exposure to licensing complexity, waste, and optimisation opportunities. For background on Microsoft Enterprise Agreement fundamentals, see our dedicated guide.

IaaS — Infrastructure-as-a-Service

You rent compute, storage, and networking but manage operating systems, middleware, and applications. OS and software licence costs are either included in pay-as-you-go rates or brought via Azure Hybrid Benefit. Maximum control but maximum responsibility for optimisation — oversized VMs and idle resources directly increase costs.

PaaS — Platform-as-a-Service

Azure manages the platform and infrastructure. Licence costs are bundled into the service price (for example, Azure SQL Database includes the SQL Server licence). Simpler licensing but rightsizing the service tier remains critical — over-provisioned PaaS instances waste money just as readily as oversized VMs.

SaaS — Software-as-a-Service

Fully managed applications (Microsoft 365, Dynamics 365) with per-user subscription pricing. No infrastructure to optimise, but licence count management and plan-level selection (E3 vs E5) are the primary cost levers. Shelfware — paying for unused SaaS seats — is the main waste source.

Service Model Selection Recommendations

  • For commodity services (email, CRM), SaaS yields the lowest TCO. For custom applications, evaluate PaaS first to benefit from built-in licensing and managed scaling. Use IaaS only when you need full OS-level control or specialised configurations.
  • Prefer PaaS for licensing simplicity: use Azure SQL Database instead of installing SQL Server on a VM wherever the use case allows — the service includes the licence and scales more efficiently.
  • Right-size PaaS tiers aggressively: review utilisation metrics regularly and downgrade plans when usage does not justify higher tiers. Many Azure PaaS services allow tier changes with no downtime.
  • Manage SaaS licence counts actively: implement processes to reclaim or reassign Microsoft 365 licences when employees leave or change roles.

Microsoft Advisory Services →

2. Licensing Agreements: EA vs CSP vs MCA

The agreement structure under which you purchase Azure services has significant implications for pricing, flexibility, and cost governance. Enterprises can buy Azure under three primary contract vehicles, each with distinct trade-offs that CIOs must evaluate against their organisation's size, spend trajectory, and appetite for commitment.

AspectEnterprise Agreement (EA)Cloud Solution Provider (CSP)Microsoft Customer Agreement (MCA)
Term & Commitment3-year contract; committed annual spendEvergreen; no upfront commitmentEvergreen; no minimum commitment
PricingVolume discounts locked for term; price protectionPartner sets pricing; pay only for actual usageList pricing; custom discounts negotiable for large spend
BillingAnnual billing with pre-purchased Azure creditsMonthly pay-as-you-go through partnerMonthly pay-as-you-go direct from Microsoft
FlexibilityRigid during year; adjustments at anniversary onlyHighly flexible — scale services as neededFlexible; start/stop services without lock-in
Best ForLarge enterprises with predictable, stable demandVariable usage; organisations valuing agilityMid-sized firms; EA transitions; direct Microsoft relationship

EAs offer volume discounts and price protection in exchange for a three-year commitment. Underutilising your pre-purchased credits is the most common pitfall — you pay for committed capacity whether you use it or not. CSP provides monthly flexibility through a partner with no long-term commitment. MCA is a direct agreement with Microsoft — evergreen, no minimum, and capable of consolidating Azure, Microsoft 365, and Dynamics 365 under a single contract. For deeper guidance, see our Microsoft EA Negotiation Strategies and the complete guide to EA vs CSP.

Avoid Mixing Unintentionally: Different departments purchasing Azure through separate channels (one under EA, another via CSP) creates compliance risk and may prevent you from meeting EA commitments. Consolidate purchases strategically under a single agreement structure.

"The most expensive Azure agreement is the one that does not match your consumption pattern. An EA with underutilised credits wastes money through commitment; pay-as-you-go without reservations wastes money through missed discounts. Match the agreement to your reality, not your projections."

Redress Compliance, Microsoft Practice Advisory

Microsoft EA Optimisation Service →

Microsoft EA optimisation case study

See how a Brazilian bank restructured its EA, cut spend by 25 percent, and improved audit protections — with Redress as independent advisor.

3. Common Azure Cost Pitfalls and How to Avoid Them

Even with the right agreement and service models, organisations routinely encounter pitfalls that inflate Azure costs or create compliance exposure. Recognising these patterns is the first step toward systematic prevention.

High Impact: Over-Provisioned Resources

Deploying expensive VM SKUs "just in case" that run at 5 percent CPU utilisation, or using Premium SSD storage when Standard would suffice. Over-provisioning is the single largest source of cloud waste.

High Impact: Idle & Orphaned Resources

VMs left running 24/7 when not needed, orphaned disks remaining after VM deletion, unattached public IPs and load balancers silently accruing charges. These "forgotten" resources can accumulate thousands in monthly costs.

High Impact: Not Using Azure Hybrid Benefit

Enterprises with on-premises Windows Server and SQL Server licences paying full pay-as-you-go rates in Azure — effectively paying for the software licence twice. Failing to enable AHB is a direct loss of 30 to 50 percent savings on every eligible workload.

Medium Impact: No Cost Monitoring or Governance

Adopting Azure without budgets, alerts, or tagging standards. Without visibility, costs spiral until the invoice arrives. Missing cost governance is the root cause of "bill shock."

Pitfall Prevention Checklist

  • Monthly orphaned resource audit: run Azure Advisor or custom scripts to identify unused VMs, unattached disks, and idle public IPs.
  • Mandatory resource tagging: enforce tags (Environment, Owner, Project, CostCentre) via Azure Policy from day one.
  • Budget alerts at 80 and 90 percent: configure Azure Cost Management alerts on every subscription and resource group.
  • Team training on cloud billing: ensure developers and engineers understand how Azure resources are billed.
  • Azure Policy enforcement: restrict deployment of oversized VM SKUs and require owner tags on all resources.

Microsoft Contract Negotiation Service →

4. Azure Hybrid Benefit: Leveraging Existing Licences

Azure Hybrid Benefit (AHB) is the single most powerful cost-saving lever available to enterprises with existing Microsoft on-premises licences. It allows you to apply your Windows Server and SQL Server licences (with active Software Assurance) to Azure resources, eliminating the software licence surcharge and paying only for base compute — at the same rate as a Linux VM.

40%
Windows VM savings
30-35%
SQL per vCore savings
180 days
Dual-use rights window
Up to 80%
AHB + RI combined

Windows Server AHB

Applying AHB to a Windows VM reduces the hourly rate to the Linux-equivalent "base compute" cost, saving approximately 40 percent on Windows VM costs. Each Windows Server Datacenter licence covers two Azure VMs with up to 8 cores each (or one VM with up to 16 cores).

SQL Server AHB

SQL Server licensing is the most expensive component in many Azure deployments. AHB for SQL eliminates the licence surcharge on Azure VMs and reduces PaaS database costs (Azure SQL Database, Managed Instance) by 30 to 35 percent per vCore. For SQL Enterprise Edition, this represents thousands per month per instance.

Compliance Tracking

Every AHB-enabled resource must be backed by a corresponding on-premises licence with active Software Assurance. Overprovisioning AHB beyond your entitlement creates audit exposure. A critical nuance: Software Assurance provides dual-use rights for 180 days during migration. You can run the licence simultaneously on-premises and in Azure during the transition period. After 180 days, the licence must be assigned to one environment only.

  • Inventory all eligible licences: maintain a central register of Windows Server and SQL Server licences including edition, core count, and Software Assurance status.
  • Enable AHB on every eligible resource: use Azure Policy or deployment templates to default AHB to "On" for Windows and SQL workloads.
  • Tag and audit AHB usage: run quarterly reconciliation reports to ensure AHB-enabled resource counts do not exceed your licence inventory.
  • Renew Software Assurance proactively: lapsed SA forfeits AHB rights.

Microsoft Security Licensing Guide →

5. Reserved Instances and Savings Plans: Commitment-Based Discounts

For workloads that run consistently, Azure's pre-purchase options — Reserved Instances (RIs) and Savings Plans — offer substantial discounts in exchange for one-year or three-year commitments.

FeatureReserved Instances (RI)Azure Savings Plans
Commitment TypeSpecific VM type in a specific regionFixed hourly spend across any compute
Maximum DiscountUp to 72% (3-year, upfront)Up to 65% (3-year)
FlexibilityInstance size flexibility within VM familyApplies to any VM, container, or app service
RiskUnused reservation = wasted spendUnder-consumption = wasted commitment
Best ForKnown, stable workloads (production VMs, databases)Variable workloads with predictable aggregate spend

Optimisation Scenario: Combined AHB + RI Strategy — 80% Cost Reduction

An enterprise runs 50 Windows Server VMs (D4s_v3) 24/7 for production workloads. At pay-as-you-go rates, these cost approximately USD 11,000 per month. The team enabled Azure Hybrid Benefit (eliminating the Windows licence surcharge, saving ~40%) and purchased three-year Reserved Instances for all 50 VMs (saving an additional ~60% on the base compute rate). Result: monthly cost dropped from USD 11,000 to approximately USD 2,200 — an 80% reduction. Over the three-year RI term, total savings exceeded USD 316,000 on this single workload cluster alone.

Takeaway: AHB and RIs stack multiplicatively. For any production Windows or SQL workload running 24/7, the combination should be the default approach, not the exception.

Microsoft · White Paper
Azure Commitment Negotiation: How to Structure MACC Deals Without Overpaying
A data-driven playbook for sizing Microsoft Azure Consumption Commitments, mapping discount tiers, and structuring deals that maximise savings without sacrificing flexibility.
Download →

Teams Licensing Guide 2026 →

6. Rightsizing and Resource Efficiency

Rightsizing — aligning cloud resources with actual workload requirements — is the most universally applicable optimisation technique. In on-premises environments, over-provisioning is standard practice. In Azure, every unit of excess capacity is a direct, measurable cost. Rightsizing is not a one-time exercise; it is an ongoing operational discipline.

Step 1: Analyse Utilisation Data

Use Azure Monitor metrics and Azure Advisor to identify resources with consistently low utilisation. A VM averaging 5 percent CPU and 20 percent memory over weeks is a clear candidate for downsizing. Azure Advisor automatically flags underutilised VMs and suggests smaller SKUs.

Step 2: Resize or Consolidate VMs

Azure allows changing VM sizes within the same family with minimal disruption. Moving an application from an 8-core to a 2-core VM when usage supports it can cut compute costs by 75 percent.

Step 3: Schedule Non-Production Shutdowns

Dev/test VMs running 24/7 when only needed during business hours represent 65 to 70 percent wasted capacity. Use Azure Automation or VM schedules to shut down non-production environments outside working hours.

Step 4: Right-Size PaaS Service Tiers

Rightsizing applies beyond VMs. If an Azure App Service Plan is running at 10 percent capacity on a Premium P2v2 tier, downgrade to Standard S1. Move multiple small databases into an Elastic Pool to share capacity efficiently.

Need Expert Azure Licensing Guidance?

Redress Compliance provides independent Microsoft licensing advisory — fixed-fee, no vendor affiliations. Our Azure specialists help enterprises reduce cloud spend and negotiate better EA terms.

SPLA Licensing Guide →

7. Service-Specific Optimisation: Compute, Storage, Network, and Database

Each Azure service domain has distinct cost drivers and optimisation techniques. Addressing all four layers ensures no area of your environment is creating unnecessary expense.

Compute Optimisation

B-Series Burstable VMs are significantly cheaper than standard sizes for dev/test and low-CPU workloads. Azure Spot VMs use surplus capacity at 70 to 90 percent discounts — ideal for batch processing, QA environments, and any workload that tolerates interruption. Azure Functions and Logic Apps charge per execution rather than per hour; for infrequent tasks, serverless eliminates the base cost of an idle VM entirely. Azure Dev/Test subscriptions waive Windows licence costs on VMs — ensure all non-production resources are deployed in designated Dev/Test subscriptions.

Storage Optimisation

StrategyImplementationExpected Impact
Tiered lifecycle policiesAuto-move blobs to Cool after 30 days, Archive after 180 days40 to 70% reduction on storage costs for ageing data
Right-size disk performanceStandard HDD for dev/test; Premium SSD for production IOPS50 to 80% savings on non-production disk costs
Orphaned disk cleanupMonthly scans for unattached managed disks and snapshotsEliminates 100% of cost from forgotten resources
Appropriate geo-redundancyUse LRS/ZRS instead of GRS unless DR requirements mandate~50% reduction in redundancy premium
Reserved storage capacityPre-purchase 100+ TB blob capacity for 1 or 3 yearsUp to 38% savings on large persistent datasets

Network and Bandwidth Optimisation

Azure charges nothing for ingress but applies egress fees for data leaving Azure data centres. Co-locate dependent resources in the same Azure region to eliminate inter-region bandwidth charges. Cross-region data transfer can cost USD 0.02 to 0.05 per GB. Use Azure CDN for content delivery to cache static content at edge locations. If you regularly transfer terabytes out of Azure, an ExpressRoute circuit with unlimited data plan may be cheaper than metered internet egress.

Database and Analytics Optimisation

For intermittent database workloads, Azure SQL Database serverless tier auto-scales compute and pauses during inactivity — you pay nothing during idle periods. Multiple databases with varying usage patterns can share a single compute allocation through Elastic Pools. For Cosmos DB, use autoscale throughput instead of fixed provisioned RU/s.

EA vs CSP: Complete Guide →

8. FinOps Governance: Continuous Cost Management

Cost optimisation is not a one-off project — it is an ongoing operational discipline. Enterprises that treat cloud cost management as a continuous process, often called FinOps (Financial Operations), consistently achieve 20 to 30 percent lower Azure spend than organisations that optimise only at migration or renewal.

Free Assessment Tool: How ready is your organisation for its next Azure/EA renewal? Our free readiness assessment reveals savings opportunities and negotiation leverage.

Take the Free Assessment →

  • Monthly cost reviews with stakeholders: hold structured reviews with IT, finance, and application owners. Highlight anomalies, discuss optimisations completed and planned.
  • Cloud cost scorecard: publish a monthly dashboard showing spend vs budget per department, top five savings actions taken, and top five unactioned recommendations.
  • Cost estimates in deployment pipelines: integrate Azure Pricing Calculator API into infrastructure-as-code pipelines.
  • Quarterly optimisation sprints: schedule dedicated periods where the sole focus is analysing and improving cost efficiency.
  • Annual independent cost audit: engage external cloud cost consultants to benchmark your spend against peers and identify optimisations your internal teams may have missed.

"Cloud cost governance is not about restricting innovation — it is about ensuring that every pound spent in Azure delivers measurable business value. The organisations that embed cost awareness into engineering culture consistently outperform those that treat it as a finance exercise."

Redress Compliance, Azure FinOps Practice

MCA Explained: Is It Replacing EAs? →

9. Migration Planning vs Ongoing Optimisation

Organisations migrating to Azure face fundamentally different optimisation opportunities than those already operating in the cloud. The migration phase offers the chance to "do it right from the start" — avoiding the technical debt and over-provisioning that plague lift-and-shift approaches.

Migrating to Azure

Measure actual on-premises utilisation before selecting Azure resource sizes. Use Azure Migrate to right-size target VMs. Evaluate PaaS/SaaS modernisation for each workload. Plan AHB and RI purchases from day one. Set post-migration cost review milestones at 30, 60, and 90 days.

Already in Azure

Re-assess your licensing agreement at renewal. Conduct a thorough environment review for accumulated inefficiencies. Evaluate modernisation from IaaS to PaaS for mature workloads. Manage subscription sprawl through consolidation and central governance.

Migration Example: Right-Sized Migration — 45% Below Initial Projections

A financial services firm planned to migrate 200 on-premises servers to Azure IaaS. Initial estimates projected USD 85,000 per month in Azure compute costs. The firm measured actual CPU, memory, and storage utilisation across all 200 servers for 30 days before migration, right-sized target Azure VMs, enabled AHB for all Windows and SQL workloads, purchased one-year RIs for production servers, and modernised 30 workloads to PaaS services.

Result: Actual monthly Azure cost: USD 47,000 — 45% below initial projections. Annual savings of USD 456,000 compared to the naive lift-and-shift approach.

Teams Unbundling from Office 365 Playbook →

10. Why Independent Advisory Matters for Azure Optimisation

Azure licensing and cost optimisation involve a complex intersection of technical architecture, commercial agreements, and licensing compliance that most internal teams encounter only during major renewals or migrations. Independent advisory delivers value in three distinct areas.

Area 1: Agreement Negotiation

Independent advisors bring benchmark data from comparable Azure agreements across industries, enabling evidence-based negotiation of EA discounts, commitment levels, and contractual terms. Microsoft's sales team negotiates Azure agreements daily; your procurement team does it every three years. Independent expertise closes this information asymmetry.

Area 2: Licence Compliance & AHB

Advisors audit your licence estate to ensure AHB usage is fully compliant, identify entitlements your team may have missed, and prevent the compliance gaps that trigger audit exposure.

Area 3: Architecture Cost Review

Experienced cloud cost consultants identify architectural inefficiencies — unnecessary cross-region traffic, over-provisioned PaaS tiers, legacy VM families — that internal teams may have normalised over time. A fresh perspective often identifies 15 to 25 percent additional savings on mature Azure environments.

Redress Compliance maintains complete independence from Microsoft. We do not resell Azure services, hold Microsoft partner status, or earn referral commissions. This independence ensures our optimisation recommendations are exclusively aligned with your interests.

Frequently Asked Questions

What is Azure Hybrid Benefit and how much can it save?
Azure Hybrid Benefit allows organisations with existing Windows Server or SQL Server licences (with active Software Assurance) to apply those licences to Azure resources, eliminating the software licence surcharge. AHB alone saves approximately 40 percent on Windows VM costs and 30 to 35 percent on Azure SQL Database vCore pricing. When combined with Reserved Instances, total savings can reach up to 80 percent compared to pay-as-you-go rates.
Should we choose an Enterprise Agreement, CSP, or MCA for Azure?
Enterprise Agreements suit large enterprises with stable, predictable Azure consumption — they offer volume discounts and price protection but require a three-year commitment. CSP provides maximum flexibility with no commitment, paying only for actual usage through a partner — ideal for variable workloads or organisations under 500 users. MCA offers a direct Microsoft relationship with no minimum, suitable for mid-sized organisations or those transitioning off an EA. We recommend engaging independent advisory to model total cost under each option based on your actual consumption data.
What is the difference between Reserved Instances and Savings Plans?
Reserved Instances commit you to a specific VM type in a specific region for one or three years, offering discounts up to 72 percent. They deliver maximum savings for known, stable workloads but require accurate forecasting. Savings Plans commit you to a fixed hourly compute spend (not a specific resource) for one or three years, with discounts up to 65 percent. They automatically apply to any compute usage across regions and VM types, offering more flexibility at slightly lower savings. Most enterprises benefit from using both.
How do we identify and eliminate Azure waste?
Start with Azure Advisor, which automatically flags underutilised VMs, missing Reserved Instance opportunities, and resources without AHB. Implement monthly orphaned resource audits to find unattached disks, idle public IPs, and VMs with no login activity. Enforce mandatory resource tagging so every resource has an identifiable owner. Schedule non-production VM shutdowns outside business hours. Organisations that implement these practices typically identify 15 to 30 percent of their Azure spend as waste within the first quarterly review.
Can Microsoft audit our Azure Hybrid Benefit usage?
Yes. Microsoft can request verification that you hold sufficient licences with active Software Assurance to cover all AHB-enabled Azure resources. If you have enabled AHB on more resources than your licence inventory supports, you face compliance exposure. We recommend quarterly AHB reconciliation: list all AHB-enabled resources and verify that each is backed by a corresponding licence in your inventory.
Does Redress Compliance have any commercial relationship with Microsoft?
No. Redress Compliance is a 100 percent independent advisory firm with no commercial relationship with Microsoft or any other software vendor. We do not resell Azure services, earn Microsoft referral commissions, hold Microsoft partner status, or receive any financial incentive from Microsoft. This independence ensures our Azure optimisation and licensing recommendations are exclusively aligned with our clients' interests.

The Enterprise Spend Navigator

Weekly insights on Azure pricing changes, Microsoft EA negotiation tactics, and licensing traps. Read by 4,000+ CIOs and procurement leaders.

Unsubscribe anytime. No spam.

Optimise Your Azure Licensing and Cloud Spend

Redress Compliance delivers independent Azure and Microsoft licensing advisory — helping CIOs right-size agreements, maximise Hybrid Benefit coverage, and typically achieve 20 to 40 percent cost reductions.