tokyotexture

That only goes so far though. A lot of games need internet access, so essentially you are running potentially modified binaries running on your hardware/network, that gets access to the outside. Sure, blast radius becomes somewhat limited, but you still have a potential problem.

I know OCI isn't popular around here, but it ticks all the boxes you listed. Managed Postgres, Terraform, and Toronto/Vancouver regions. It'll end up being roughly half the cost of AWS at list for your average EC2/RDS/S3 workload.