We’ve taken over cloud infrastructure from enough previous vendors and in-house teams now to notice a pattern: the bill is almost never high because traffic actually needs that much capacity. It’s high because someone made a reasonable-sounding decision two or three years ago and nobody has revisited it since.
”Just in case” sizing compounds quietly
The most common cause is simple: infrastructure gets sized for a traffic spike that might happen someday, not for the traffic that’s actually arriving today. That’s not an unreasonable instinct on its own. The problem is that it rarely gets revisited once the business is stable, so a server or database tier chosen for a six-month-old growth projection is often still running two years later, at a fraction of its actual utilisation.
Vendor reference architectures are a starting point, not a target
Cloud providers publish reference architectures for a reason, and they’re often a genuinely useful starting point. But they’re written to be broadly safe for a wide range of companies, which usually means more redundancy and more headroom than a specific business actually needs. We’ve seen teams treat a reference architecture as the destination instead of a first draft, and quietly pay for capacity nobody is using.
Nobody owns the monthly review
The infrastructure that stays right-sized is the infrastructure someone is actually looking at every month. The infrastructure that balloons is the infrastructure that was set up correctly once, and then never had a named owner checking utilisation against cost afterward. This is the fix that has the best return for the least engineering effort, and it’s also the one that gets skipped first when a team gets busy.
What we check on a new account
When we take over infrastructure, the first pass is almost always the same: compare what’s provisioned against what’s actually being used over the last 90 days, check whether backups and logs are retained longer than any actual policy requires, and look for resources still running that trace back to a project that shipped or was cancelled months ago. That last one alone has paid for the audit more than once.
Right-sized infrastructure isn’t about running lean for its own sake, it’s about the bill matching what the business actually needs, on purpose, instead of by accident. If it’s been a while since anyone looked closely at yours, get in touch and we’ll tell you honestly what we see.