Yes. Also, if you're not serverless but are containerized, ECS/Fargate has a simple workflow through the console that in turn runs Cloudformation and sets thing

Yes. Also, if you're not serverless but are containerized, ECS/Fargate has a simple workflow through the console that in turn runs Cloudformation and sets things up (VPC, gateway, load balancer, security groups...) with sensible defaults. You do still need to learn how to lock things down, inbound/outbound rules especially. For pros, the console is simply not the way, but for your first Spiffy Dockerized App, this is great. Also, the new Amazon-managed firewall rules for web-apps are killer for app developers who are not security pros![0] Lest this sound like Fanboyism, our long-term strategy is Firebase, calling AWS APIs when necessary :) [0] https://aws.amazon.com/blogs/aws/announcing-aws-managed-rules-for-aws-waf/ https://aws.amazon.com/blogs/aws/announcing-aws-managed-rule...