[gte910h]

EC2 is fine for part of the servers. I'd honestly say you should have multiple locations of servers, managed via different means (so the single points of failure are not there).

EC2 just shouldn't be ALL of the servers.