Get both on a 30-minute call and ask them to prioritize the tasks.
I'm assuming you've helped estimate each task? If not, this is an excellent time to present it to the PMs. Unfortunately, I don't have a holistic view of your workload. This should reduce your anxiety and provide transparency to all involved.
Depends on your needs. Some larger organizations will have multiple providers for business continuity, multi region is not enough. The smaller organization might decided on a cloud , solely based on pricing. AWS is the giant, followed by Azure and GCE is 3rd. Depending on your orchestration tools, why choose one :) as long as you don't lock yourself into a specific service, you should be able to switch across cloud compute. If you're not using AWS, get the free trial, kick the tires.
Well depending if you have the answer to the 4-5 security questions , like previous address ,car loan payment amount, or mortgage , stuff that you would only know. I don't know the full scope of the compromise, but someone wanting to use your info would not benefit from freezing it. If you forget your pin I'm expecting them to send it to the mailing address
Even if an attacker doesn't benefit, it's still possible for them to mount a denial-of-service attack. That could be very damaging. Or, they could use the threat of a DoS attack for extortion purposes.
Shipping it with the app, you lose the cluster wide cached objects. A SPOF is the resolver. It's google but it's a SPOF. Is the failover to s3 automatic ? Or do you make a code change ? What kind of latency does that add ?
Thx. Got it. I don't know enough about the app, but I would have it serve directly from CF to users. Instead of hitting this environment for static assets. Good job and good conversation.