I think this is a very common occurrence! A good alternative to this ever-present risk is to use a dedicated virtual private server that is unmetered. This wo

I think this is a very common occurrence! A good alternative to this ever-present risk is to use a dedicated virtual private server that is unmetered. This would make mistakes like this (and yes, it is a mistake - it is his fault he didn't read the cloudfare details and publicly served a large VM image) impossible. Here is my referral code for the one I use[1]: https://crm.vpscheap.net/aff.php?aff=15 https://crm.vpscheap.net/aff.php?aff=15 This also (especially) applies to startups that might suddenly take off at any moment (but don't expect to.) AWS is a ticking time bomb of unexpected charges. You never know what the Internet will bring you. Go for an unmetered VPS and have 1 single well-defined charge that doesn't change. That's what I do on my side projects. [1] I previously asked Dan, the moderator here, if I can share in this way and he said it's okay. I don't have other affiliation with that company and have found it good. The last time I posted this I got 80 visitors and no complaints (and got upvotes), so I figure it is a good resource for people.