AWS, primary cloud.
Primary cloud across most Arure deployments. EC2, RDS, S3, Lambda — multi-region, multi-account, IaC-driven, observability-first.
Compute & containers
EC2 right-sized, ECS and EKS for container workloads, ECR for image registry. We pick the orchestration layer that fits the team — not the one that wins demos.
Data & storage
RDS PostgreSQL/MySQL for transactional, Aurora where the workload earns it, DynamoDB for high-throughput key-value, S3 with lifecycle policies for object storage.
Networking & security
VPC with private subnets, ALB/NLB, WAF, Shield, Secrets Manager, KMS. Least-privilege IAM, GuardDuty findings routed to on-call, audit logs in CloudTrail.
Multi-region by design
Active-active or pilot-light DR — depending on RTO. Route 53 health checks, RDS cross-region replicas, S3 replication. Multi-region tested, not just configured.
Observability & on-call
CloudWatch, X-Ray, OpenTelemetry into Datadog or Grafana where the client uses it. SLO-driven alerting that pages humans only when humans should be paged.
Serverless & event-driven
Lambda for burst workloads, EventBridge for orchestration, SQS/SNS for decoupling. Step Functions for the workflows that need a state machine, not a polling loop.