Cloud Cost Optimisation: How MSPs Hide Profits in Azure Bills

Your AWS or Azure bill is higher than it should be. Not because of resource usage — because your MSP is building hidden margins into every line item.

This isn't a conspiracy theory. It's the standard operating model for cloud management services in Australia.

The Three-Layer Margin Model

Most MSPs operate a cloud practice with three separate profit layers. Clients usually see only one.

Layer 1: The Reseller Margin (3-15%)

Microsoft and AWS offer partner programs that provide discounts on list pricing:

• Microsoft CSP (Cloud Solution Provider): Partners get 12-15% off Azure list price, plus additional incentives for committed consumption
• AWS ProServe: Discounts range from 3-10% depending on commitment level and partner tier
• Google Cloud: 5-8% partner discounts on most services

Most MSPs pass some of this discount to clients — typically 2-5% — and keep the rest as margin. If your cloud bill is $50,000/month, and your MSP is a Gold Microsoft partner, they're likely keeping $4,000-6,000/month in undisclosed reseller margin.

Layer 2: The Management Fee (15-30%)

This is the explicit markup. MSPs charge a management fee on top of raw cloud costs:

• "Standard" management: 15-20% markup on all cloud services
• "Premium" management: 20-30% markup with additional support
• "All-inclusive" pricing: Fixed per-user or per-workload price with no transparent cloud cost pass-through

The problem isn't the markup — it's the lack of transparency. Many clients don't know what the base cloud cost is versus what the MSP is charging to manage it.

Layer 3: The Shared Discount Arbitrage

This is where it gets creative. MSPs pool multiple clients' cloud consumption to negotiate larger volume discounts from Microsoft or AWS. The discounts are then:

• Kept entirely by the MSP. The client sees list price.
• Partially shared. The MSP takes 50-100% of the discount as additional margin.
• Rolled into "reserved instance" markups. The MSP buys 3-year reserved instances at 40% discount, charges the client on-demand rates, and pockets the difference.

Real-World Examples

The Azure Dev/Test Loophole

Azure Dev/Test pricing offers 40-55% discounts on VMs that aren't in production. One MSP we reviewed was running 60% of a client's "production" workloads on Dev/Test-priced subscriptions — saving $12,000/month — and billing the client full production rates.

The client had no way to verify the subscription type because they couldn't access the underlying Azure tenant.

The Reserved Instance Shell Game

A Sydney MSP managing $80,000/month in AWS consumption purchased 3-year Reserved Instances covering 80% of the client's baseline. The RIs saved approximately $28,000/month vs on-demand pricing.

The client's bill: $80,000/month (on-demand rates). The MSP's actual cost: approximately $52,000/month. The MSP's additional margin: $28,000/month.

The client believed they were paying "competitive cloud rates."

The Support Plan Markup

Microsoft support plans cost $300-$1,000/month for most businesses. AWS support plans range from $100-$15,000/month depending on tier.

Multiple MSPs bill clients $500-$2,000/month for "cloud support" that costs them $0 — because they're already paying for an internal support agreement as a partner. The client pays for a service the MSP already has.

Is This Illegal?

Most of these practices are legal. They're disclosed in the fine print of the MSP agreement under clauses like:

• "MSP may retain any discounts, rebates, or incentives earned through vendor relationships"
• "Cloud pricing is based on MSP's then-current rate card, not underlying vendor pricing"
• "Management fees are calculated as a percentage of total cloud expenditure"

Whether they're ethical is a different question.

The Transparency Divide

Australian MSPs fall into three categories on cloud billing:

Category A: Fully Transparent (15% of MSPs)

• Pass through cloud costs at partner price (no reseller markup)
• Itemise management fees separately
• Share volume discounts with clients
• Provide read-only access to the underlying cloud console

Typical client outcome: 15-25% lower total cloud costs than going direct

Category B: Partially Transparent (45% of MSPs)

• Show cloud costs but mark them up 5-10%
• Management fee is listed as a separate line item
• Discounts are kept, but the practice is disclosed

Typical client outcome: 5-15% more expensive than going direct, but includes management

Category C: Fully Opaque (40% of MSPs)

• Cloud costs are bundled into a single "managed infrastructure" fee
• No visibility into underlying resource costs
• Discounts, support credits, and partner incentives are all kept
• Clients cannot verify what they're paying for

Typical client outcome: 20-50% more expensive than if they managed cloud themselves

What You Can Do

1. Demand Read-Only Access

Build into your contract that you receive read-only access to the cloud console. This lets you verify resource usage, instance types, and support plans.

2. Request Cost Allocation

Ask for cloud costs broken down by resource type, with the base vendor cost clearly separated from management fees. Any MSP unwilling to provide this is hiding something.

3. Benchmark Against Direct Pricing

Use the Azure Pricing Calculator or AWS Simple Monthly Calculator to estimate your direct cost. Compare it to your MSP bill. The difference — minus a reasonable 10-15% management fee — is undisclosed margin.

4. Audit Reserved Instances

Request a report of reserved instance coverage and ask if RIs are being used for your workload. If the MSP buys RIs but charges on-demand rates, you're paying for savings you should be sharing.

5. Verify Support Plans

Ask specifically what Microsoft/AWS support plan your account uses. Check whether you're paying for support that's included in the MSP's partner tier.

The Bottom Line

Cloud cost optimisation in the MSP world isn't just about right-sizing resources — it's about understanding the business model of your provider. Some of the "optimisation" recommendations you receive may be designed to increase the MSP's margin, not reduce your costs.

The good news: transparent MSPs exist. The bad news: you have to know what questions to ask to find them.

---

Use The Ledger to compare cloud management capabilities across Australian MSPs. For contract protection, run your agreement through the Red Flag Scanner.