Falling Down the AWS Rabbit Hole

date: Apr 02, 2026 | updated: Jul 20, 2026

Why AWS Looked Overbuilt

A typical AWS reference architecture diagram can look like this, even when it's for something as ordinary as a WordPress site.

AWS WordPress Architecture

For a long time that's how I read AWS. An intimidating diagram wrapped around what was really just server hosting. I figured most of it was bespoke infrastructure configuration hidden behind a UI, and you were paying more for the privilege of clicking buttons instead of SSH-ing into a box. Getting curious enough to actually dig into how AWS works changed that, and that curiosity eventually pulled me through the AWS Certified Solutions Architect – Associate certification. At enterprise scale, a lot of what looks like unnecessary complexity turns out to be solving real problems.

High Availability

On AWS it's common for a VM instance to become unavailable without warning. The platform prioritizes flexibility and elasticity over any single machine staying up, so you build systems that can tolerate losing an entire instance through software fault-tolerance rather than hardware redundancy. A single server needs planned downtime to patch the OS. A system built to tolerate machine failure can be patched one node at a time without taking anything down. Doesn't matter much until you're the one keeping something alive through a host failure at 3am. This is where the CAP and PACELC theorems kick in to guide real trade-off decisions.

How AWS Prices Compute

The other thing that clicked was how compute pricing matches how unpredictable a workload actually is. On-Demand covers the traffic spike you can't forecast. Reserved Instances and Savings Plans exist because if you already know a workload runs steadily for a year, committing upfront is a lot cheaper than paying On-Demand the whole time. Spot Instances are there for workloads that can tolerate interruption in exchange for a steep discount. Different workloads carry different risk, and treating them all the same is how teams end up overpaying. The hardened VPS approach works well when you've already settled on a steady baseline and want to skip the cloud's pricing flexibility.

Compliance and Shared Responsibility

Compliance was the part I underestimated. Geographic restrictions and data residency sound like a checkbox until you're an enterprise guaranteeing EU customer data never leaves EU soil, or a healthcare company meeting regulations on data in transit and at rest. AWS splits responsibility for this down the middle. AWS covers security of the cloud: physical data centers, hardware, the global network, the virtualization layer. You cover security in the cloud: IAM configuration, encryption, security groups, whatever you actually build on top of it. "We're on AWS" was never a real answer to "is this secure."

Global Infrastructure and Latency

AWS runs 123 Availability Zones across 39 regions, with more coming to Saudi Arabia and Chile. On paper that's just a number. It matters the moment you're building something latency-sensitive, and gaming is the clearest case — a player routed through a region on the other side of the planet is at a real disadvantage that has nothing to do with skill.

AWS Global Accelerator is where this gets interesting. Normal internet traffic hops between ISPs and transit providers until it eventually reaches your region. Global Accelerator uses anycast IPs to pull traffic onto AWS's own backbone at the nearest edge location instead, then routes it internally the rest of the way. The messy, unpredictable part of the trip gets cut down to a single hop. Combined with AZs spread across enough regions that "nearest edge" is actually close for most players, that's a hard setup to replicate without either AWS's edge footprint or its private network. For competitive matchmaking specifically, I haven't seen another cloud provider match it. Projects like the cloud backup pipeline leverage S3 as the storage backbone.

The Credential

None of this is really about AWS having better technology than running your own servers — a lot of the underlying pieces existed before the cloud did. What changed my mind was seeing how AWS packages decades of enterprise infrastructure problems into services a small team can actually operate, without needing a dedicated ops org for each one.

AWS Certified Solutions Architect – Associate badge

by Sandev Abeykoon