Skip to main content
Cloud & Infrastructure OpsLast reviewed 2026-09-20

NoOps

An honest account of the claim that operations disappears: what managed and serverless platforms genuinely remove, what they only move to a vendor, and what stays with you no matter what you buy.

Overview

Read the full NoOps guidance
WHAT IT IS NoOps is the proposition that managed platforms, serverless runtimes and provider-operated services can remove operational work from an engineering organisation entirely. Treated as a claim to examine rather than a goal to pursue, it is a useful lens: it forces an explicit account of which operational work is genuinely eliminated, which is transferred to a vendor, and which remains yours regardless. **Not this:** NoOps is not the absence of operations: it is a shift in where operational work happens and who is accountable for it, and the work that cannot be shifted is not reduced by the label. WHY IT EXISTS The term exists because the underlying shift is real and large. Provider-managed databases, queues and runtimes genuinely remove patching, capacity provisioning and hardware failure handling from most teams' concerns, and pretending otherwise is as unhelpful as the maximalist claim. The discipline exists to keep the accounting honest, because organisations that adopt the slogan without the accounting discover the remainder during an incident — typically that nobody owns observability, cost, or the vendor relationship. WHEN TO USE IT Use this lens when choosing between self-operated and managed components, when a team argues that a serverless architecture removes the need for operational roles, or when planning what an operations function should do after a significant managed-service migration. It is a decision aid, not an architecture. WHO OWNS IT Engineering leadership owns the honest accounting, because the question is fundamentally about where accountability sits after the work moves. Whoever adopts a managed service owns what remains of its operation: configuration, cost, limits, failure behaviour and the upgrade path the vendor imposes. Procurement and legal own the contractual side, which becomes an operational dependency the first time a provider changes terms or deprecates something you rely on. WHAT GOOD LOOKS LIKE The organisation can state, service by service, which operational responsibilities transferred and which did not. The residue is explicitly owned: observability of managed components, cost management, service limits and quotas, data durability verification, failure behaviour when the provider degrades, and exit cost. Provider status is monitored and the response to a provider outage is defined rather than improvised. Nobody claims that operational maturity was achieved by procurement. HOW TO IMPLEMENT Write the split down for one real service: list every operational responsibility and mark each as eliminated, transferred, or retained. The retained column is usually longer than expected, and that is the output. Assign owners to everything retained. Verify what the provider actually guarantees rather than what the marketing implies, especially around durability and recovery. Define your behaviour when the provider is degraded — the practices in /resilience-engineering apply unchanged. Keep cost visible through /finops, since managed services move cost from capital to a bill that grows quietly. HOW TO ASSESS YOURSELF Pick a managed component and ask who is paged when it degrades, who watches its cost, and what your recovery position is if its data is lost. Ask what your exit cost would be. Ask whether anyone has read what the provider actually commits to. Take the scored self-assessment at /assess and plan the gaps with /roadmaps.

Capabilities

  • Exit cost assessment

    Knowing what leaving a provider would cost in time and money before that becomes a decision under pressure.

  • Provider degradation response

    A defined behaviour for when the provider is degraded, rather than improvising during their incident.

  • Residual operations ownership

    Assigning owners to everything the managed service did not remove, which is usually more than expected.

  • Responsibility split accounting

    Stating, per service, which operational responsibilities were eliminated, which transferred to a provider and which were retained.

  • Service limit and quota management

    Knowing and monitoring the provider limits your workload runs against before one of them becomes an outage.

Practices

  • Provider degradation drill

    Rehearsing the response to a provider outage before the provider schedules one for you.

  • Shared responsibility review

    Re-examining, per managed service, what the provider actually commits to versus what was assumed.

  • Unowned resource sweep

    Periodically finding resources nobody claims, which are simultaneously a cost and a security exposure.

Metrics

  • Provider outage impact time

    How long your users were affected by a provider incident, which measures your response rather than theirs.

    Unit: minutes per year. Good direction: down.

  • Retained responsibilities

    Operational responsibilities that remain yours after adopting a managed service, counted rather than assumed away.

    Unit: responsibilities. Good direction: down.

  • Service limit incidents

    Incidents caused by hitting a provider quota or limit nobody was monitoring.

    Unit: incidents per year. Good direction: down.

  • Untagged resource rate

    Share of resources with no owner tag, which are simultaneously a cost and a security question.

    Unit: percent. Good direction: down.

Tools

  • AWS Lambda

    Managed function runtime frequently cited as the archetype of removing server operations.

    Visit site ↗
  • Google Cloud Run

    Managed container runtime that removes host operation while retaining configuration and limit management.

    Visit site ↗
  • Infracost

    Cost estimation for infrastructure-as-code changes directly in pull requests.

    Visit site ↗

Architecture patterns

Reference architectures and their trade-offs live in the blueprints library.

Maturity

  1. L1 ReactiveManaged services were adopted and operations declared solvedrequired stage

    Nobody wrote down what moved and what did not, so the remainder is discovered during an incident.

  2. L2 RepeatableThe responsibility split is written down per servicerequired stage

    Each operational duty is marked eliminated, transferred or retained, and the retained column is honest.

  3. L3 StandardizedEverything retained has a named owner

    Observability, cost, limits and failure behaviour for managed components belong to someone specific.

  4. L4 MeasuredProvider limits and costs are monitored

    Quotas are watched before one becomes an outage, and spend is visible before it becomes a surprise.

  5. L5 OptimizedProvider degradation is rehearsed and exit cost is known

    The response to a provider incident is practised, and what leaving would cost has been assessed rather than imagined.

Maturity for noops is measured, not guessed — every score traces to your answers. See how maturity is scored.

Put it to work

Sources