The ReGoBs Blog
Notes from running other people's infrastructure
Writing on DevSecOps, AWS and cloud compliance for teams building regulated products in India. What we see going wrong in real accounts, and what actually fixes it.
Datadog Alternative: What Will the Auditor Ask After You Switch?
A Datadog alternative moves the telemetry and leaves the evidence behind. Audit trails stop at 90 days, CERT-In asks for 180, and the old tool stops answering.
Read the post →AWS Cost Optimization: How Much Should You Actually Commit?
AWS cost optimization comes down to one commitment you cannot cancel. Which Savings Plan, how much per hour, and what a half-yearly DR drill does to it.
Read the post →DevOps Consulting Services: How Do You Measure the Work?
DevOps consulting services are sold without a single number in the scope. The five DORA delivery metrics to put in the contract, and the two to measure first.
Read the post →Cloud FinOps on AWS: Which Cost Number Should You Report?
Cloud FinOps on AWS stalls on its first report: unblended or net amortised. Which number to report, why the efficiency score flatters you, and what it misses.
Read the post →AWS Consulting Services: Who Is Actually Paying for the Work?
AWS consulting services are often part-funded by AWS itself. What MAP money and promotional credits actually pay for, what they never pay for, and how to check.
Read the post →Datadog Alternative: What Would You Have to Rebuild?
A Datadog alternative is sold as an agent swap. The monitors, dashboards and tag names are the real bill, and nothing exports them. Count yours first.
Read the post →Cloud Migration Consulting: What Has to Exist Before Cutover?
Cloud migration consulting prices the servers and skips the landing. What has to be true in a regulated AWS account before the first workload cuts over.
Read the post →Cloud Cost Management on AWS: Who Owns Which Number?
Cloud cost management breaks at the second product: tags never backfill, spike alerts arrive a day late, and Marketplace sits outside the anomaly monitor.
Read the post →AWS Consultant: What Does the Partner Badge Actually Prove?
An AWS consultant's Advanced Tier badge counts trained people and launched deals, not audited work. Which AWS partner badges involve an audit, and what to ask.
Read the post →Cloud Cost Optimization: What Lock-In Costs a Fintech
Cloud cost optimization stalls when every workload is welded to one vendor. What lock-in, egress and free startup credits really cost a fintech on AWS.
Read the post →Grafana vs Datadog: Which Bill Does a Fintech on AWS Want?
Grafana vs Datadog is a choice of billing unit: Datadog counts hosts, Grafana Cloud counts active series. Price your own AWS fleet on both before you sign.
Read the post →DevOps Consulting Services: What Should the First Month Deliver?
DevOps consulting services usually open with a deck. The first month should end with a pipeline you own: reviewed PR, OIDC role, saved plan, no keys.
Read the post →Datadog Alternative: Which Ones Actually Keep Data in India?
Datadog has no India region and Amazon Managed Grafana has none either. Which Datadog alternative a regulated fintech on AWS can actually run in ap-south-1.
Read the post →Managed Kubernetes Services: What Is Still Yours on EKS?
Managed Kubernetes services on AWS run the control plane and little else. The version, the nodes, the audit log and the $438 a month are still yours.
Read the post →New Relic Pricing: The Bill Is Users, Not Gigabytes
New Relic pricing is $0.40 a gigabyte after 100 free, so ingest is rarely the surprise. The $349 full platform seat is. How a fintech on AWS counts both.
Read the post →Cloud Consulting Services: What Should You Own When They Leave?
Cloud consulting services end on a date. What a fintech must hold in its own name by then: the management account, the org trail, the state bucket and the repo.
Read the post →Datadog Pricing: Estimate Your Bill From AWS Before You Sign
Datadog pricing is a commitment per product plus an on-demand rate above it: 20% more on hosts, 50% on logs. Build the estimate from EC2 and CloudWatch first.
Read the post →How Should an AWS Managed Service Provider Get Into Your Account?
Most managed AWS services start with an IAM user and a shared key. Here is the access model a fintech should hand its AWS managed service provider instead.
Read the post →Reduce AWS Costs: What a Fintech Can Cut Without Failing an Audit
Half the 'compliance' line items on a fintech's AWS bill are defaults nobody chose. What the regulator actually makes you keep, and what you can cut this month.
Read the post →Reduce Datadog Costs: What a Fintech on AWS Can Actually Cut
Datadog costs come from indexing, tag cardinality and the ninth-busiest hour, not ingestion. What a fintech on AWS can cut and still keep CERT-In's 180 days.
Read the post →PCI DSS Compliance on AWS: Which Accounts Are Actually in Scope?
AWS's new PCI DSS reference architecture puts your logging, network and identity accounts in scope, not just the one with card data. Here is what that changes.
Read the post →SSM Agent Vulnerability CVE-2026-89049: Is Your Fleet Still Exposed?
An SSM Agent vulnerability, CVE-2026-89049, hands instance role credentials to anyone who can forward a port. The fix shipped on 13 July. Who still has it?
Read the post →GitHub Actions Security: The July Checkout Change Most Teams Missed
GitHub Actions security changed on 20 July 2026: actions/checkout now refuses fork PR code in pull_request_target workflows. Did your CI break, or opt out?
Read the post →DevOps Outsourcing Services and the RBI: What Goes in the Contract?
The RBI's 2025 outsourcing directions set a deadline of 10 April 2026 for every NBFC IT vendor contract. Here is what yours must say, paragraph by paragraph.
Read the post →RBI Cybersecurity Directions 2026: What Changes for an NBFC on AWS?
The RBI Cybersecurity Directions 2026 replaced the NBFC IT framework on 31 July with no transition period. Here is what the text demands of an AWS account.
Read the post →AI Agents Took Over a Wiki for Three Months. Would You Have Noticed?
15,000 agent edits ran on a German wiki from May until August, and outside researchers found them first, using only a public page. Strip out the AI and it is an old finding: an unbounded write path and a log nobody read.
Read the post →Should a Bangalore Fintech Hire a DevOps Engineer or Bring In a Team?
Bangalore pays the highest DevOps salaries in India, and a fintech is bidding for the same engineers as Razorpay and CRED. The comparison is not a salary against an invoice, and the hardest hire is the first one.
Read the post →What Does RBI Data Localisation Actually Require?
Choosing an Indian region is the easy ten percent. The hard ninety is everything that copies payment data out of it without anyone deciding it should: backups, log shipping, monitoring vendors and managed services replicating by default.
Read the post →Can You Actually Report a Cyber Incident in Six Hours?
Six hours is not a writing deadline, it is a test of what already exists. Noticing, deciding, reconstructing and submitting are four different problems, and only the last one is paperwork.
Read the post →Which Is the Best DevOps Company in India for a Fintech Business?
The search results are directories, and directory rank tracks review volume rather than capability. Here are the criteria that actually separate vendors for a regulated product, and a shortlist we are openly part of.
Read the post →Want this looked at on your own account?
A free cloud security and CI/CD audit. You keep the findings either way.