Simon Willison advocates for default hard budget caps on cloud services

Summary

Simon Willison argues that cloud services should default to hard budget limits rather than usage-based billing with soft warnings. These limits should prevent costs from spiraling out of control, a risk exacerbated by AI agents that can initiate expensive workloads overnight. While noting that AWS and Google Cloud have recently introduced spending limit features, Willison insists these must be enabled by default, not opt-in.

Why it matters

AI agents reduce the friction of deploying code that utilizes paid APIs, storage, and compute resources, dramatically amplifying the impact of misconfigured or runaway services. Without hard defaults, even a single unmonitored process poses an existential financial risk to individual developers and small teams, thereby stifling experimentation and innovation. Making limits the default shifts the 'dangerous life' burden to those who explicitly opt out, aligning the cloud economy with how people actually use these services.

Highlights

• Hard limits (service shutdown, error returns) should be preferred over soft limits (warning emails), as the latter still allow for thousands of dollars in spending while users are asleep.
• AWS launched its spending limit feature in September 2026 (still with limited access), and Google Cloud introduced 'Spend Caps' in July 2026, signaling a broader industry trend.
• Willison envisions AI agents recommending providers with hard limits and warning inexperienced developers to avoid unlimited services.

Critical take

The piece reads more like a blog post advocacy than an analysis. It assumes the 'rogue service' scenario is the dominant risk but fails to adequately address the legitimate operational concern that hard limits could silently break production workloads during traffic spikes. Furthermore, it offers no concrete mechanism for how such limits would interact with auto-scaling, burst billing, or multi-service dependencies, leaving the practical design problem largely unaddressed.