AWS & Cloud.

What actually drives an AWS bill, and what an architecture holds when it matters. From two accounts over twelve months, with figures instead of recommendations.

Where to start

The article that opens up this topic.

A year of FinOps on AWS: from 15,000 to 2,500 euros a month

Twelve months of FinOps across two AWS accounts: where the large amounts were and why commitments come last.

20 min read

All articles

The 14 further articles on this topic.

25 October 2026 · 7 min read

One AWS account or several: when the split pays off

One AWS account or several? When one account stays the right boundary, what the split solves, and when Organizations pays back its overhead.

Read the article

16 October 2026 · 12 min read

Data mesh on AWS with SageMaker Unified Studio: what I take away from practice

Data mesh on AWS with SageMaker Unified Studio: what a data product means day to day, where Lake Formation fails silently and where I would start today.

Read the article

24 September 2026 · 11 min read

Terraform or AWS CDK? How I choose infrastructure as code

Terraform or AWS CDK? Why I usually describe AWS infrastructure with Terraform, and when CDK really earns its extra programming layer.

Read the article

24 September 2026 · 10 min read

API Gateway or Application Load Balancer? What does a normal API on AWS need?

API Gateway or Application Load Balancer on AWS? When an ALB is enough, and when API Gateway actually justifies its extra layer.

Read the article

23 September 2026 · 10 min read

ECS Fargate or Kubernetes: what does a normal application really need?

ECS Fargate or Kubernetes on AWS? Why I start normal applications on Fargate, and at what point Kubernetes actually pays back its overhead.

Read the article

12 September 2026 · 7 min read

Cleaning up IAM in a grown AWS account

See first, then the keys, then the permissions: credential report and last-accessed data, OIDC instead of key pairs, one boundary instead of many rules.

Read the article

12 September 2026 · 8 min read

Backups nobody has ever restored

Three ways backups fail silently, what a rehearsal actually measures, how it runs, and what rhythm can be sustained.

Read the article

12 September 2026 · 9 min read

MySQL 5.7 to 8.0: what breaks in the move

Four classes of breakage, two of which stay silent, how to find them in advance, and what the managed service additionally does differently.

Read the article

12 September 2026 · 9 min read

A PHP monolith on ECS Fargate

Containers without cluster administration: what belongs in the image, how configuration and secrets are separated, and what the health check has to check.

Read the article