Case studies
B2B SaaS · AWS

Kubernetes platform that cut cloud spend by 60% and deploy time from 45 minutes to 5.

A growing SaaS platform was running on hand-built AWS infrastructure with manual deployments and costs rising 40% month on month. I replaced it with a production-grade EKS platform, GitOps delivery and infrastructure as code, migrated with zero downtime.

Client
Series B SaaS platform, engineering team of ~25
Sector
B2B SaaS
Duration
8 weeks
Engagement
Fixed-Scope Build
60%
lower cloud spend
5 min
deploys, down from 45
0
unplanned outages in 6 months

01

The challenge

The platform had grown faster than its infrastructure. Deployments were manual and succeeded about 70% of the time, environments were inconsistent, scaling policies were ad hoc, and monthly AWS spend was rising 40% month on month. The engineering team was blocked by infrastructure rather than enabled by it.

02

Solution architecture

Solution architecture: B2B SaaS platform on EKSSaaS users reach the platform through the existing load balancers, which send traffic to workloads running on Amazon EKS with managed node groups, a cluster autoscaler and resource quotas per team namespace. Argo CD reconciles the declared state of each environment from Git. Each environment has its own VPC, and workloads use IAM roles for service accounts with least-privilege node roles. GitHub Actions builds and tests every change, Terraform provisions accounts, networking, the cluster and add-ons, and Prometheus and Grafana provide cluster and cost visibility and alerting.ONE VPC PER ENVIRONMENTDELIVERY & OPERATIONSCUSTOMERSSaaS usersWeb and API trafficTEAMEngineers, about 25Changes through pull requestsINGRESSExisting load balancersWorkloads were migrated behind them service by service,each with a rollback path, so users never noticedEKS CLUSTERWORKLOADSTeam namespacesResource requests and limitsQuotas per team namespaceAutoscaling from measured usageSCALINGCluster autoscalerManaged node groupsScales on measured usage,not on guessesGITOPSArgo CDReconciles declared statefor each environmentPromotion flow from GitNETWORKVPC per environmentEnvironments kept separateOne reproducible definition for eachIDENTITYIAM roles for service accountsLeast-privilege node rolesAccess scoped per service accountCIGitHub ActionsBuilds and tests everychange, then Argo CDpicks it up from GitOBSERVABILITYPrometheusGrafana for cluster andcost visibility. Alerts onsaturation, failed syncsIACTerraformAccounts, networking,cluster and add-ons.Plan/apply gated in CIRequest pathCluster to network and identityDelivery, provisioning and telemetry

Request path in teal. Dashed lines are private connectivity, deployment and telemetry. Scroll sideways on small screens.

Delivery
GitHub Actions builds and tests. Argo CD reconciles declared state per environment.
Platform
EKS with managed node groups, cluster autoscaler, resource quotas per team namespace.
Network & identity
VPC per environment, IAM roles for service accounts, least-privilege node roles.
Infrastructure as code
Terraform modules for accounts, networking, cluster and add-ons. Plan/apply gated in CI.
Operations
Prometheus and Grafana for cluster and cost visibility. Alerting on saturation and failed syncs.

Layers top to bottom. Controls apply at every layer.

03

Approach

  1. 01Assess current spend, workload shapes and failure modes before designing anything.
  2. 02Standardise on EKS with a single, reproducible cluster definition in Terraform.
  3. 03Move delivery to GitOps with Argo CD so every environment is declared, reviewed and reconciled.
  4. 04Right-size with resource requests, limits and autoscaling driven by measured usage, not guesses.
  5. 05Migrate workloads incrementally behind existing load balancers so users never noticed.

04

How the delivery ran

  • Week 1–2: assessment, cost baseline, target architecture agreed in writing.
  • Week 3–5: EKS platform, Terraform modules and Argo CD bootstrapped in the client's accounts and repositories.
  • Week 6–7: workload migration service by service, each with a rollback path.
  • Week 8: validation against the agreed requirements, runbooks, recorded hand-over. 30 days of support followed.

05

What was delivered

  • EKS platform and Terraform module library in the client's repositories
  • Argo CD GitOps repository structure and environment promotion flow
  • Autoscaling, quota and cost-control configuration
  • Runbooks for deploy, rollback, upgrade and incident response

06

Results

DimensionBeforeAfter
Cloud spendRising 40% month on month60% lower, stable
Deployment success~70%, manual95%, automated
Deployment time45 minutes with intervention5 minutes, hands-off
Unplanned downtimeRecurringNone in the 6 months after go-live
OwnershipTribal knowledgeDeclared in Git, documented, operated by the team

Facing a similar decision? A 30-minute call is the fastest way to find out whether the same approach fits.

Book a 30-minute call

More case studies

More platforms delivered.

All case studies

Need a full team or 24×7 operations?

Team-scale delivery is with Cloudlit.

Cloudlit designs, builds and runs cloud and AI infrastructure for banks, government and enterprises: cloud architecture, DevOps automation, Red Hat OpenShift and 24×7 managed operations. When an engagement needs more than one engineer, that is where it is delivered.

Contact

Tell me about the platform.

Tell me what you are building or where your platform is under strain. I read every enquiry myself and reply within one business day.

What happens next

  1. 01A 30-minute call about your platform and what has to change.
  2. 02A short written view of the risk and the next step, whether or not we work together.
  3. 03If it fits, a fixed-scope proposal with deliverables, timeline and price basis.

Prefer to just talk?

Book a 30-minute discovery call, or send a message on WhatsApp. No obligation, no pitch deck.

Or email directly: [email protected] or WhatsApp: +92 332 3600677

Based in Karachi, Pakistan. Working with teams in the UAE and Saudi Arabia.

Protected by reCAPTCHA. Google's Privacy Policy and Terms of Service apply.