Kimberly Rooney
National Oceanic & Atmospheric Administration
The U.S. Federal Government Community of Practice prepared this guide to assist agency FinOps personas, including FinOps practitioners, engineering, finance, procurement, product owners, and leadership, with managing the variable nature of Cloud Service Provider (CSP) costs. As agencies rapidly move away from data centers and fixed capital assets to CSP and consumption-based cost models, budget and procurement practices need to evolve to provide additional flexibility for spending variability and funding adjustments. Moreover, agencies should prioritize cloud optimization, diligently monitor the budget execution of cloud contracts, forecast and understand cloud costs and drivers, and develop robust contingency plans to address the inherent variability of cloud spending.
Federal FinOps teams face significant challenges in managing cloud spending due to variability in surpluses and deficits between planned, estimated, forecasted, and actual cloud budget performance. This variability is driven by evolving requirements and the implementation of cost optimization techniques, making it difficult for federal agencies to plan and forecast cloud consumption and costs accurately.
To address these challenges, federal agencies must proactively develop contingency strategies that accommodate budget variances and build flexibility into their budget execution plans. This approach will enable agencies to make informed cloud decisions, optimize costs, and adhere to public sector cloud acquisition guidelines.
By addressing these topics, federal agencies can better manage cloud spending variability, optimize costs, and make informed decisions that align with public sector guidelines. This proactive approach will enable agencies to fully leverage the benefits of cloud computing while maintaining budgetary control and flexibility.
Federal agencies have been directed to transition from traditional data centers to cloud-based IT infrastructures (See Cloud First, Cloud Smart, and the Data Center Consolidation Initiative (DCOI) to reduce costs, increase agility and efficiency, and bolster cybersecurity. However, the pressure to swiftly comply with these directives often leads to a “lift and shift” migration strategy. This approach, which simply moves existing workloads to the cloud without significant optimization or architectural adjustments to leverage cloud-native capabilities, can hinder the realization of potential cost avoidance through workload optimization and designing for the cloud. This often leads to unnecessary cloud spend. “Born in the cloud” workloads tend to be better optimized due to cloud-native architecture and CSP tools that provide rightsizing recommendations during development, but even the best-architected systems require consistent modernization in the ever-evolving cloud environment. Whether migrating into the cloud or developing a cloud-native workload, agencies will ideally include the financial impacts of cost optimization strategies in planning and estimating, forecasting, and budgeting for cloud spending.
By making smart architecture decisions to avoid over-provisioning, agencies can benefit from the cloud’s inherent elastic nature and only pay for what is consumed. Agencies should continuously seek ways to optimize their workloads and appreciate that both a proactive planned cloud optimization accounted for during budget formulation and a reactive optimization approach executed during budget execution can result in cost avoidance. The table below highlights the key takeaways and nuances when working through each phase of your agency’s Cloud Financial Management practice, considering both Planned and Unplanned Cost Optimization.
During budget formulation, federal agencies collaborate with the Office of Management and Budget (OMB) to identify priorities and determine programmatic funding levels to include in the President’s Budget Request to Congress. This stage in the budget cycle closely aligns to FinOps Estimating and Planning and the process of defining funding levels for cloud-related programs and projects. It also allows Federal FinOps teams to incorporate cost optimization and avoidance considerations into cloud initiatives planning. Discussions with cloud engineers, product owners, and procurement on Architecting for Cloud, Workload Optimization, and Rate Optimization can be particularly valuable when estimating how optimization and cost avoidance impact spending forecasts and budget request funding levels.
Note: Agencies should also consider the labor resources and any software licenses needed to facilitate migration, including workload reengineering and refactoring for the cloud. This may require a short-term surge investment to achieve long-term optimization and cost avoidance.
Accurately estimating and forecasting the financial impacts of cloud cost optimization and avoidance during budget formulation is challenging. After an agency’s budget request is submitted to Congress, it will take nearly two years to receive funding, likely at levels different than requested. Additionally, emerging issues, evolving priorities, and new requirements may impact cloud migration and optimization initiatives. Changes to federal acquisition policies, updates to government contract vehicles, and adjustments to CSP rates and service offerings have the potential to further exacerbate funding level inaccuracy in agency budget requests. Therefore, during budget execution, when funding levels are known and available for obligation, is another time for agencies to evaluate and implement cloud cost optimization initiatives.
After an agency’s budget is enacted, funding levels are known, and funds are available for obligation, planned, unplanned, and/or adjusted cloud cost optimization and avoidance initiatives should still occur during execution. Optimization slack is likely available if cloud-hosted workloads were priced using “on-demand” rates. During migration planning and solution design, strategies within the FinOps Architecting for the Cloud and Workload Optimization capabilities should be incorporated to establish a realistic cost baseline and avoid inefficient spending as early as possible (see Cost Aware Product Decisions). Rate Optimization, including advantageous pricing in cloud reseller agreements, Savings Plans, Reserved Instances, and Spot Instances, can be enabled during budget execution.
When optimizing a cloud environment ensure that any changes are documented and pass through an efficient formal change request process and review board. This ensures that agency FinOps Practitioners, product owners, and budget staff know the changes and update cloud spending forecasts accordingly. Forecasting becomes increasingly important for workloads not including cost avoidance and optimization strategies during the budget formulation phase. Inevitably, there will be ways to optimize and reduce costs; such reductions should be included in forecasts and communicated to stakeholders. This is an iterative and ongoing process to incorporate the results of optimizations into forecasts. An increased variance should not deter the FinOps practitioner from making optimization recommendations or the application owner from executing them. Improved forecasting will lead to more accurate future budgets.
Formulation | Execution | Forecasting |
|
|
Subsequent Forecasts should include newly optimized costs
|
Factors may impact an agency’s ability to execute cloud funds, including any cost optimization and avoidance initiatives, as planned, forecasted, or budgeted. For example, federal agency cloud environments must adhere to rigorous security requirements. Before being permitted for use, a cloud environment must demonstrate compliance with FedRAMP and conduct a Risk Management Framework (RMF) Assessment (DoD cloud environments must also comply with DISA) before receiving the Authority to Operate (ATO). The ATO process can significantly delay when a cloud contract is issued and when the cloud environment is ready for onboarding agency workloads, or the delivery of applications to the cloud. This can result in the under-execution of cloud contract budgeted funds. In another example, a federal contract vehicle utilized by an agency may not permit the purchase of committed use discounts like Savings Plans and Reserved Instances, impacting planned rate optimization and resulting in a cloud budget deficit.
To maximize opportunities for funding adjustments, agencies must implement rigorous monitoring of cloud contract budget performance. Forecasting consumption based on actual and anticipated cloud usage should be done regularly (recommended monthly or even more frequently if possible). Rate Optimization performance (coverage % and utilization %) should be monitored in real-time by establishing thresholds and automated alerts. This can be done in the CSP console or third-party FinOps tool. Leverage all available tools to evaluate infrastructure performance and take action to reduce costs; examples include CloudWatch, AWS Compute Optimizer, AWS Trusted Advisor, Azure Advisor, Oracle Cloud Advisor, and GCP’s Recommender. Changes to cloud cost forecasts should be communicated to the application/budget owner frequently. Comparing the forecast to the actuals and the budgeted numbers gives advanced notice and insight into your cloud spend and drivers and will position you for contingency planning.
Agencies should strive to incorporate cloud funding and contract flexibility. They should also develop contingency plans for managing cloud budget surpluses and deficits. Many agencies already maintain unfunded priority lists in the event funding becomes available. Agency FinOps Practitioners and product owners should familiarize themselves with the budget and contract mechanisms available when cloud funding adjustments are needed.
During budget execution, an agency may underburn on a cloud contract if optimization measures have been implemented or other factors result in consuming fewer cloud resources than planned. If cloud spending has been optimized (or is less than forecasted), an agency will have additional funds remaining on the cloud contract. Several options can be explored for repurposing those surplus funds.
FinOps Practitioners should understand if excess cloud contract funds can be de-obligated from the acquisition vehicle or moved to a separate Contract Line Item Number (CLIN) to manage budget variances. Close monitoring of cloud contract budget execution should enable early detection so that allowable adjustments occur months before the period of performance (PoP) ends. As part of contract funding discussions, these factors should be considered:
When cloud contract budget underburn is identified, FinOps teams should investigate the feasibility of purchasing commitment-based purchases, like reserved instances (RIs) or savings plans, if the contract vehicle or reseller allows. By acquiring RIs or Savings Plans in advance of the contract’s expiration, agencies can leverage significant discounts to achieve lower rates without having to de-obligate funds. Savings from cost avoidance can be applied toward enhancing or expanding cloud operations, thereby further maximizing the value of the allocated budget. As part of the RI and Savings Plan discussion, consider these procurement and funding factors:
Depending on the construct of the cloud organization and if permissible on the contract, there may be an option to re-purpose cloud budget surplus across other linked CSP accounts or subscriptions.
Does the contract allow for marketplace purchases? If the cloud contract, vehicle, and/or reseller permits, consider purchasing licenses or services via CSP marketplaces. Additionally, agencies should determine if the cloud contract or funding account is restricted to IaaS only. Cloud CSP marketplace offerings are primarily SaaS and professional services. Does your funding have a restriction on if it is IaaS only? Like RIs, using cloud contract budget surplus to purchase SaaS licenses or services through a CSP marketplace offering enables agencies to enhance cloud operations without de-obligating and potentially forfeiting funds. It also may open up other avenues for rate negotiations and different vendor options for services, products, or licenses.
Congress appropriates funding to federal agencies accounts for a defined purpose that is generally broken down further into Programs, Projects, or Activities (PPA) (For more information on the Federal Budget Process visit: https://crsreports.congress.gov/product/pdf/R/R46240). The timing of when excess funds may be deobligated from their agreement vehicle, in addition to the funds remaining in the period of availability, may limit available options. For example, if excess funds have a short time window for obligation before their expiration, budgetary adjustments requiring congressional notification may not be completed in time for new obligations. Agencies should consult their legal counsel on statutory requirements/restrictions for reallocation, reprogramming, and/or transfers of appropriated funds.
Agencies may consider using the excess budget authority to align with the same budgetary allocation within a PPA. If agencies aim to repurpose excess cloud budget funding for priorities other than cloud services on the current acquisition vehicle, the excess funding should be de-obligated and re-obligated during the period of availability for that appropriation.
Reprogrammings are adjustments made within an appropriations account for other purposes that were not contemplated when the appropriations were made. Reprogrammings are generally allowable unless restricted by law but may have advance congressional notification requirements. These requirements are typically included with the applicable annual appropriations act. For example, Congress may require advance notification if reprogrammings between PPAs exceeds a defined dollar threshold.
Transfers are adjustments made from one appropriation account to another. Transfers are generally prohibited unless an agency is granted specific statutory authority.
In conclusion, Federal FinOps Practitioners should adopt a proactive approach to manage cloud spending variability. By anticipating potential surpluses and deficits, developing contingency plans, and incorporating cost optimization strategies into budget planning, agencies can effectively navigate the complexities of cloud cost management. Recognizing the challenges posed by evolving requirements, delayed funding, and dependencies on various teams, it is crucial to prioritize budget execution flexibility. By carefully considering funding mechanisms and contract vehicles, agencies can ensure they have the necessary resources to support their cloud initiatives while optimizing costs.
We’d like to thank the following people for their help on this Paper: