Cloud Infrastructure & Compute3 min readUpdated September 2026

AWS or Google Cloud for a Solo Cloud or DevOps Consultant

Picture a two-person DevOps consultancy juggling five client accounts, none of them large enough to justify a dedicated platform team. That's most freelance technical consultancies, and the cloud decision looks different at this scale than it does for a company running one product. Here's how that decision plays out in practice, worked through as a real example.

Vendors Covered in this Article

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

The starting point: what you already know cold

Say you've spent six years deep in AWS, from EC2 and VPC networking through Lambda and CloudFormation. A new client shows up already running on Google Cloud. Do you force a migration to your comfort zone, or learn their platform? For a solo or two-person shop, the honest answer is usually to meet the client where they are. Relearning a second platform's core services is a manageable few weeks of ramp-up; migrating a working client environment for your own convenience is a much larger, harder-to-justify project.

Where cross-account access actually gets complicated

With five client accounts, you need a way to jump between them without keeping five sets of credentials in five browser tabs. AWS's cross-account IAM role assumption is a well-worn pattern for exactly this, letting you use one identity to assume scoped roles in each client's account. Google Cloud's equivalent, using service account impersonation across projects, does the same job with a different set of commands to learn. Set this up properly for whichever platform a client is on rather than falling back to shared root-level credentials out of convenience, since that convenience is exactly what turns into a security incident.

How billing simplicity changes what you recommend

A solo consultant doesn't have a finance team to reconcile a complicated multi-service bill every month. When a client asks you to pick their platform from scratch, weigh how easy the resulting monthly bill will be for them to read without your help, since a client who can't understand their own cloud bill will call you every month asking why it changed. Simpler, more predictable workloads favor whichever platform gives the client the clearer invoice for their specific mix of services.

What reliability discipline looks like without a team behind you

Without a platform team to catch mistakes, your own deployment habits are the whole safety net. Keeping your own change failure rate low matters more when you're the only person on call, and building a habit of testing changes in a staging environment before touching a client's production system pays for itself the first time it catches a mistake1. This holds regardless of which cloud a given client runs.

When it's worth turning down a client's platform

There's one case where forcing a migration makes sense: a client's existing setup is actively unsafe, like shared root credentials across a team or no backup strategy at all. In that case, the platform they're on matters less than fixing the underlying practice. Otherwise, five clients on a mix of AWS and Google Cloud is a normal, sustainable way to run a solo or small consultancy, as long as you're disciplined about not mixing up which credentials belong to which account.

Pricing your time when the platform isn't the one you know best

Quoting a fixed-price project on the platform you know less well is where solo consultants lose money quietly, because the extra hours spent looking things up don't show up until the invoice doesn't cover the time. Bill hourly, or pad a fixed quote honestly, when a project calls for the platform you're less fluent in, and use that engagement to build real fluency for the next client who shows up on the same platform. Treat every unfamiliar-platform project as paid training, because that's effectively what it is, and price it accordingly rather than eating the ramp-up cost yourself.

Keep a running note of which services on the less familiar platform tripped you up, so the next engagement on it goes faster and you can quote it more tightly. Over a year or two, this turns what started as your weaker platform into a second real strength rather than a recurring source of underbid projects.

When it's time to say no to a mismatched engagement

Not every client is worth taking on, even at solo-consultant rates. A prospective client asking for deep expertise on a specialized service you've never touched, on a platform you barely know, with a tight deadline and no room to learn on the job, is a project worth referring elsewhere rather than accepting and improvising. Protecting your reputation for the clients where you're genuinely strong matters more than filling every gap in your calendar.

Consider referring a client elsewhere when several of these are true:

  • The engagement needs deep expertise on a specialized service you have never touched.
  • The client's platform is one you barely know, and the project offers no room to learn on the job.
  • The deadline is tight enough that improvising would put your reputation at risk.
  • The existing setup is actively unsafe, for example shared root credentials or no backup strategy, and fixing the practice matters more than the platform.
Executive Capability Standard

What Good Looks Like

A solid solo cloud consultant can name every client account they hold access to, exactly which role they hold in each, and when that access was last reviewed.

Building The Capability (5-Stage Skill Ladder)

1. Learn:Get comfortable with the core compute, storage and IAM services on whichever second platform your clients are already using.
2. Do Manually:Review your own access list across all client accounts by hand every quarter and remove anything you no longer need.
3. Delegate:Bring in a trusted second consultant to cover client accounts during time off, with scoped access set up in advance.
4. Automate:Set up scripted cross-account role assumption so switching client contexts doesn't rely on memorized console clicks.
5. Buy:License a password manager built for teams once juggling client credentials by folder alone starts feeling risky.

How to Get Started

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

AWS

AWS fits a consultancy whose clients skew toward general-purpose web infrastructure and existing AWS familiarity.

Visit AWS→
Google Cloud

Google Cloud fits a consultancy whose clients lean on Google Workspace or data and analytics tooling already.

Visit Google Cloud→

Frequently Asked Questions

Can one person realistically stay proficient on both AWS and Google Cloud?

Yes, for the core services most small clients actually use: compute, storage, managed databases, networking basics and IAM. You don't need to track every new service launch on both platforms, just the handful your client work touches most.

Should I get certified on both platforms as a solo consultant?

A certification on your primary platform helps you win work faster since it's a quick trust signal for prospective clients. A second certification on the other platform is worth it once you notice a real share of your leads already running there.

How do I avoid mixing up credentials across five different client accounts?

Use a password manager with separate vaults or folders per client, name your cross-account roles consistently, and never keep a client's root or admin credentials active longer than a single task requires. A naming convention you follow religiously beats any amount of memory.

Sources

Where we quote a benchmark, we show its source. Other figures in this guide are estimates or general guidance, so check them against your own numbers.

  1. Change failure rate by DORA performance cluster. DORA Accelerate State of DevOps 2024 (Google Cloud), cluster table via Octopus Deploy analysis, 2024.

Related Guides