The moment a DBA inherits a production managed database that's been running on defaults for 18 months, they have no clean way to understand what's been changed, what's been left at defaults that shouldn't be, and what they can actually touch versus what the cloud provider controls. They cobble this together from cloud console screenshots, `SHOW ALL` query dumps, and tribal knowledge — there's no single view that maps 'here's what's set, here's what the provider allows you to change, here's what you'd set differently for your workload.'

The gap persists because the cloud providers have no incentive to surface this clearly. A DBA who knows their database is misconfigured might migrate off or demand more control. The buyer here is often a platform engineering team or a DBA contractor brought in to audit a system — not the developer who spun the database up — which means the person who feels the pain loudest isn't the one who evaluated the service.

What's missing specifically: there's no tool that connects to a managed database, reads all accessible configuration parameters, flags which ones are at cloud-provider defaults versus user-modified, maps each parameter against known performance and stability recommendations for the workload type (OLTP, analytics, mixed), and then shows what's locked versus what can be changed via parameter groups. DBAs currently do this manually — querying system tables, cross-referencing documentation, and maintaining spreadsheets. The complaint that 'we don't have superuser access and all configuration comes with default parameters requiring manual modification' describes exactly this workflow gap.

This is a business because configuration drift is a recurring event — every schema migration, RDS version upgrade, or parameter group change can silently reset or invalidate prior tuning. A DBA who does this audit once will need it again in six months. And a DBA contractor who audits six clients a year will pay for it without blinking because the alternative is 4–8 hours of manual work per audit.

What to build

Build a read-only agent that connects to managed PostgreSQL or RDS instances via standard credentials, reads all accessible configuration parameters, compares them against a curated baseline of recommended settings per workload type, flags provider-locked parameters separately from user-configurable ones, and exports a diff report showing defaults versus current values — deliverable as a shareable PDF or structured JSON.

Where to start

Target DBA consultants and freelancers who do managed database audits for clients — they have a direct cost-per-hour reason to pay, they do this repeatedly, and a shareable report is a deliverable they can hand to a client, which makes the tool part of their workflow rather than optional.

The hard part

The parameter recommendation layer requires workload-type classification that can't be done from configuration alone — you'd need query pattern data or schema hints — so the first version will produce recommendations that are too generic for power users to trust, and you have to decide early whether to build workload detection or ship a narrower 'here's what changed from defaults' product first.

How it makes money

Per-instance per-month subscription, with a free tier capped at one instance; expands naturally as consultants add client databases or internal teams add environments.

See the evidence. The complaints behind this idea, the products they came from, and similar ideas in Relational Databases.

More ideas in Relational Databases