Cloud bill went up and nobody can say why
Cloud bill went up and nobody can say why: usually orphaned resources, missing tags, or one shared account. Fix ownership first.
·
3 min read
One person knows how to deploy it means you do not have a release process. You have a person. When they are on holiday, in a meeting, or leaving the company, shipping and recovering production waits on their phone. UK SaaS and product teams hit this quietly until a Friday outage makes it expensive.
A single deployer is not “tech debt” you can ignore until the next funding round. It is operational risk. Releases stall because nobody else will touch production. Incidents drag because the runbook lives in one head. Holidays become freezes. Hiring slows because the next engineer cannot prove they can ship without shadowing for months. Investors and enterprise buyers notice when change windows depend on one name in Slack.
I’ve walked into teams where every deploy was a private ritual: laptop secrets, a half-remembered script, and “don’t touch staging, it isn’t real.” That works until it does not. The cost shows up as missed launches, overtime, and a founder who cannot take a week off without staging a war room. Customers do not care that the only person who can ship is on a flight. They care that the fix did not land, and that nobody else could land it either.
Slack messages that start with “can you push it?” Production credentials only on one machine. Staging that nobody trusts. No written path from merge to live. Friday freezes because the deployer is out. A rollback that means ringing the same person at midnight. If your mental model of release is a name, not a step list the team can follow, you are already there.
Another tell: the pipeline exists on paper but nobody else has ever pressed it end to end. Or deploys still happen from a laptop because “CI is flaky.” That is still one-person knowledge dressed up as automation.
Good is boring. A repeatable deploy the next engineer can run without a call. Shared access on accounts the company owns, not a personal cloud login. Secrets in a proper store, not a notes app. Docs beside the code: how to ship, how to roll back, who to page. Infra and pipeline in git so the path is visible. You do not need a YAML lecture. You need to know someone else can ship on Tuesday when the original deployer is offline.
Eight Mile’s infrastructure and cloud work is built for inherited scary deploys: pipelines, infra in git, and a path the team can run. Soft path when the product itself needs stabilising on accounts you own: SaaS. We walk into the mess, leave something the next person can operate, and you keep the accounts.
A short rescue or audit is enough when the app is sound but knowledge and access are trapped: document the path, move secrets and logins onto company accounts, put a boring pipeline in place, and pair until a second person has shipped for real. Deeper rebuild is for when the deploy path is also lying to you — snowflake servers, no staging, or changes that cannot be reproduced. Do not buy a six-month platform rewrite to fix a bus-factor problem that a focused takeover would clear in weeks.
If one person knows how to deploy it, fix the ownership and the path before the next holiday or resignation makes the risk visible to customers.
If you want a deploy the team can run on accounts you own, contact Eight Mile and say who ships today and what happens when they are away.
Cloud bill went up and nobody can say why: usually orphaned resources, missing tags, or one shared account. Fix ownership first.
·
3 min read
Moving off the server under the desk: stage a move to managed hosting or cloud you own — without a big-bang rewrite.
·
3 min read
AWS vs managed hosting for a small SaaS: when simple platforms fit, and when owned cloud, IAM and infra in git win.
·
3 min read
Leaving a freelancer with your AWS root login is a risk even after a good build. How to take back control with named IAM, MFA and a handoff.
·
4 min read
CRM for a small firm off the shelf or built: when HubSpot-class tools fit, and when a system on your own job data serves trades and clinics better.
·
4 min read
Jev vs Laya for UK tech leads: when to call TypeSafe's hosted decision API and when to self-host the open-weight Laya model on your own infrastructure.
·
4 min read
Security audit vs penetration test: when to review config first, when a buyer needs a pentest, and usual order for SaaS.
·
3 min read
Secrets in git repository history outlive a deleted file. Rotate first, then stop the next temporary commit.
·
3 min read
A backup restore test proves copies work on a clock you can live with. Untested backups are hope with a green tick.
·
3 min read
Quotes and invoices stuck in email fail as a system of record. Use one quote→job→invoice workflow with clear status instead.
·
3 min read
Field team software fails without offline-first: vans need capture, queue, and sync that works when signal dies.
·
3 min read
Multi-tenant SaaS mistakes that show up after launch: isolation, roles, files, billing, and when to stop and fix.
·
3 min read
Taking software in-house after a consultancy build: when to move, what must be true, and what a real handover includes.
·
3 min read
You don’t need a 40-page spec to start: what to bring instead, ruthless v1 must-haves, and how a first release gets priced.
·
3 min read
What “first working link in week two” actually means: a real URL for feedback, not a finished SaaS on day 14.
·
3 min read
Rescue a SaaS someone else built: when to take over an inherited product, stabilise vs rewrite, and own the accounts.
·
3 min read
Security audit checklist before you go live: access, secrets, backups, auth, deps, alerting, and when to bring in an auditor.
·
3 min read
When you need Terraform (and when you don’t): honest triggers for IaC vs console, scripts, or managed PaaS.
·
3 min read
Internal tools: buy SaaS or build on your data: when shelf seats win, and when custom on your stack is the real product.
·
3 min read
Customer portal vs email-and-Excel for trades / clinics / field teams: when a login beats chaser calls and wrong quote versions.
·
3 min read