| Weekly |
Check app health and error alerts |
App pages |
| Monthly |
Review AWS, Vercel, Supabase costs and billing alerts |
|
| Monthly |
Apply dependency security updates |
|
| Quarterly |
Rotate API keys and access keys |
Rotate API keys |
| Quarterly |
Review who has access on every platform |
Roles and access |
| Quarterly |
Test a backup restore |
TODO: write runbook |
| Quarterly |
Newcomer dry run of two runbooks |
Fix any gaps found |
| Annually |
Review S3 lifecycle, encryption, and public-access blocks |
|
| Annually |
Renew domains and certificates; confirm payment methods |
|