Controlling built a badge access request tool

“Vercel probably handles backups.”— IT Service Desk

Reason:

Allegedly because the backlog contains 1,968 items and one priority. Quietly rolled out to three countries.

Built by:

Priya, a warehouse supervisor

Build time:

one weekend

Built with:

Google Apps Script

Database:

an S3 bucket called temp with public access "temporarily" enabled

Authentication:

the webhook secret is "secret"

Deployment:

accessible through an IP address because DNS is "later"

Responsible:

an intern's old manager's manager

Documentation:

a file called README-NEW-FINAL.md

Security situation:

production secrets are in .env.example

Future disaster:

It will discover there are no backups.

Age: 8.5 years · originally expected to last 3 months · 6 owners so far · survived 1 reorganisation · last meaningful change 19 days ago · original builder left 1562 days ago

Rated mythic mostly because: €5.2m per year, 656 users, 28% chance of becoming business critical.