platform engineering
19 articles on platform engineering — what drives the cost, how it is priced, and where the savings actually are.
How much does it cost to run an internal developer platform?
An internal developer platform serving 150 engineers across three Kubernetes clusters costs about 3,069 dollars a month, or 20 dollars per engineer. Here is the breakdown and which lines grow with headcount.
Golden path templates with cost guardrails built in
A golden path template is the fastest way a platform team can set the default cost of every new service. If the template ships a NAT gateway, a Multi-AZ database, and three environments, every team that uses it inherits that bill. Here is how to build cost guardrails into the path itself.
The real cost of self-service environment provisioning
Self-service provisioning removes the ticket queue and, with it, the accidental cost review that queue was doing. When any engineer can create a full environment from a form, the platform has to carry the cost conversation instead. Here is how to keep self-service fast and affordable.
Environment sprawl: TTL policies that actually get enforced
Sprawl is not created by one bad decision, it accumulates from dozens of reasonable ones with no expiry attached. TTL policies are the cheapest fix available to a platform team, but only the enforced kind work. Here is how to design and run them.
Preview environment cost per pull request, measured properly
Preview environments are worth paying for, but most teams have never calculated the per pull request price. The number depends far more on lifespan and shared infrastructure than on the workload itself. Here is the arithmetic and the levers that move it.
What a platform team's shared services actually cost
Shared services are the invisible half of a platform budget: ingress, service mesh, logging, secrets, registries, CI, and the clusters they run on. None of it belongs to a product team, so nobody questions it. Here is how to size, split, and justify that bill.
Per-tenant vs shared infrastructure: the cost curve that decides
Dedicated infrastructure per tenant is simple to reason about and expensive to run. Shared infrastructure is cheap per tenant and complicated everywhere else. The break point is not philosophical, it is a curve you can compute. Here is how to find yours.
Landing zone and account vending: what each new account costs
A landing zone makes new accounts safe and consistent. It also gives every new account a baseline bill before a single workload lands. Multiply a 120 dollar baseline by 80 accounts and the landing zone becomes a major line item. Here is how to size and trim it.
Blast radius vs cost: how far to split accounts and subscriptions
More accounts means smaller blast radius and cleaner attribution. It also means more baselines, more egress paths, more cross-account traffic, and more discount fragmentation. The right number is the one where isolation value exceeds the separation tax. Here is how to calculate it.
Terraform remote backend cost compared: object storage, locking, and scale
A remote state backend is one of the cheapest things a platform team runs, right up until it is not. Locking tables, versioning, request volume, and hundreds of workspaces turn a rounding error into a real line. Here is what each backend option costs at scale.
CI runner fleet cost: self-hosted fleet vs managed minutes
Managed CI minutes are simple and priced per minute. A self-hosted fleet is cheaper per minute and comes with idle capacity, autoscaling, caching, and maintenance. The crossover depends on utilization more than volume. Here is how to run the numbers for your fleet.
Build cache cost tradeoff: storage and egress versus compute minutes
A remote build cache turns compute minutes into storage and transfer charges. That trade is usually excellent and occasionally terrible, depending on hit rate, object size, and where the cache lives relative to the runners. Here is the arithmetic.
Artifact registry retention: what keeping every build costs
Registries are append only by default, so every build ever produced is still there. At a few hundred megabytes per image and dozens of builds a day, storage compounds quietly for years. Here is how retention policies change the number.
Container image size and the real cost of every pull
A 1.2 GB image feels harmless until you multiply it by every node, every deploy, every autoscale event, and every CI job. Image size shows up as transfer charges, slower scaling, and longer pipelines. Here is what shrinking an image is actually worth.
Secrets management cost at scale: per secret fees meet per environment sprawl
Secrets pricing looks trivial at 0.40 dollars per secret per month, then you multiply by 40 services, 5 environments, and rotation versions. Add API call charges from pods that fetch on every start and the bill stops being trivial. Here is how it scales.
DR standby environment cost: cold, warm, and hot compared
Disaster recovery cost is a direct function of how fast you need to recover. Cold standby is nearly free and slow, hot standby is instant and doubles the bill. Most teams buy hot when warm meets their actual recovery objective. Here is the comparison.
Blue-green vs canary deployment cost: what the safety buys and bills
Blue-green doubles capacity for the length of a deploy. Canary adds a small slice plus the routing and analysis machinery to run it. Which is cheaper depends on fleet size, deploy frequency, and how long the old version lingers. Here are the numbers.
Infrastructure test environments: paying to test the infrastructure itself
Testing Terraform means creating real resources, and real resources bill by the minute. A module test suite that provisions databases and load balancers can cost more than the infrastructure it validates. Here is how to test thoroughly without paying for it twice.
Sandbox account budgets that actually stop the spending
Sandbox accounts exist so engineers can experiment without asking permission. They also produce the most spectacular surprise bills, because nothing stops a forgotten GPU instance. Here is how to enforce a budget rather than merely alerting on one.