We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible