AWS Solutions Architect for Quick AWS Architecture Review — Terraform + CI/CD Audit

we're a small B2B SaaS running our full stack on AWS (single account, ~5 EC2 instances, RDS Postgres, Lambda, S3, CloudFront). Everything works, but I inherited the Terraform code from a previous dev who wrote it in a rush -- no modules, hardcoded values, secrets in variables.tf. Our CI/CD is basic GitHub Actions (build + deploy), no security scanning, no proper environment separation. I'm looking for an experienced AWS Cloud Engineer / AWS DevOps expert to do a quick senior review of the current setup and give me a prioritized fix list I can hand to my dev to implement. This isn't ongoing management -- it's a one-off audit. What I need reviewed: - Current AWS architecture -- any obvious risks or misconfigurations - Terraform code quality -- what to refactor first (modules, state, secrets) - CI/CD pipeline -- security gaps, missing security scanning, deploy safety - Cost -- any easy wins on right-sizing or unused resources - Security -- IAM, secrets, network -- top 3 things to fix Deliverable: A written audit (Google Doc or PDF) with: - 5-10 specific issues you found - Recommended fix for each (what to change, why) - Priority order -- fix first, second, third About the setup: single AWS account, us-east-1, ~$800/month spend, 4-person eng team. I'll share the Terraform snippets and CI config via a Google Doc after we align. Please share 1-2 examples of similar AWS / Terraform reviews you've done.