I'll be looking forward to reading the post mortem. One of my big fears in moving stuff off the clouds is that it makes it easier to deal with ddos and other low hanging fruit attacks.
It's why I still host my front ends on firebase and cloudflare even though I have moved my back ends to hetzner vpses.