Facilities built an approval chain with one approver

“It's basically a spreadsheet with buttons.”— Anja, Facilities

Reason:

Honestly? Because the dashboard is updated manually every Sunday. Forked from a tutorial at 17:37 and never cleaned up.

Built by:

Anja, a field technician

Build time:

a long Thursday

Built with:

Excel macros, exposed over HTTP

Database:

an S3 bucket called test-backup with public access "temporarily" enabled

Authentication:

MFA is disabled because somebody lost their phone

Deployment:

deployed manually because CI/CD "was taking too long"

Responsible:

Lukas, who has not touched it in 2 months

Documentation:

a Confluence page marked "draft", last edited 141 days ago

Security situation:

the penetration test account had global admin

Future disaster:

It will cause Security to ask "what application?".

Age: 24 days · originally expected to last 14 days · 1 owner so far · survived 1 reorganisation · last meaningful change 24 days ago

Rated common mostly because: 35% chance of becoming business critical, 1 accidental connections, 7 users.