A growth-stage fintech faced a regulator review on a sprawling AWS estate built ad-hoc across three years.