> managed systems like s3, dynamodb, etc, which are not trivial to run yourself
How many organisations need a database to scale like that ? Maybe 1000 worldwide, and at least 900 of them are forbidden by law to run them on clouds (e.g. banks).
Also, cloud is essentially outsourcing server management. If you're of a size that needs these sorts of databases, you need a big IT department, cloud or no cloud. At that point, cloud is just vastly more expensive without any monetary advantage.
And of course, if you use any of these, the lock in is ridiculous. Also known as "they have you by the b....", and if one thing is damned sure the result will not be saving money, complexity or effort. Or savings of any kind whatsoever.
> on-demand and flexible instance types which allow you to try something without committing
And ever more management systems that let management "control spending", "control access", ... and so on, designed to prevent that. The problem with the old system was management and processes getting in the way of experimenting, and the only advantage cloud has is that it doesn't have decent support for such processes yet.
Every vendor is racing to build them in, and it's getting worse week by week. It won't be long before experimenting is impossible in cloud just like it is in owned datacenter and dedicated setups.
The problem with experiments is management in every company I've ever consulted for, and cloud doesn't change a thing, aside from, at the moment, management incompetence getting in the way of their usual sabotage. That will stop once current engineers that know cloud start getting a few promos and is already happening.
> spot instances, autoscaling groups, access to job scheduling like kubernetes. At scale (thousands of nodes) technologies like this are extremely important
There is no shortage of system supporting this sort of load on dedicated machines, servers, ...
> redundant and reliable service. It also gives you someone to complain too and blame (they provide slas)
Have you read those slas ? They'll return 10% or so of what you normally pay (not in cash of course, in vouchers) if their service is out for 33% of the time or so. That's not an sla, that's just laughable. If they are out for 5% of the total time, I'd be so pissed I'd start a chargeback.
As for redundancy and reliability, there is no shortage of vendors with similar reliability track records, and it is well documented how to make server setups that provide reliability.
> powerful management tooling and APIs that are well documented and widely understood (you can hire an engineer that has used AWS)
And dedicated servers are linux servers. You can hire engineers, I believe, that have used those.
> security: audit trails, integrated single sign on, private networks, vpns, role based access keys
Yep, these controls are part of what's preventing that experimenting advantage that currently exists. In reality, all of this relies on well designed policies at the customer side, and I've yet to see that done properly for more than a single team in any company.
All of these are of course critically dependent on Google's network, tapped by the NSA as documented in the famous leaked "SSL inserted and removed here" slide, and for numerous privacy breaches, Amazon, famous for "somehow" finding out about how the businesses hosted on their cloud work and taking their customers away (apparently more than 100 court cases against Amazon currently going on), or Microsoft, famous for so many things, including pushing through centralization in Skype for the admitted reason of gaining the ability to spy on their customers. I'm sure their ethics in the cloud hosting department are much better.
And please don't even mention those "encrypted storage" assurances. They're not even worth being called bullshit. If I get to write the code that you use to encrypt/decrypt, I can obviously trivially break any key you use. If you don't believe me, I'll give you a webbrowser to download, and I assure you it encrypts all your passwords, then just log into your web banking a few times and see what happens (note: webbrowsers inserting "extra" transactions when doing webbanking are a common thing to find in security work).
So secure ... yeah right.
Sure, it can work. It won't, of course.
> I could keep going.
Yeah you could mention that cloud's real advantage is that engineers believe that if they get a web-based non-multiplayer version of minesweeper implemented on kubernetes, they'll get a $200k+ GOOG/FB job. Not true, of course, but nobody wants to tell em that. In fact, implementing a linked list in C on a DOS 1.0 C compiler will help them a LOT more.