Data-residency rules do not rule out modern architecture. They decide where each part of it runs.
Split by sensitivity
Regulated records stay on in-country infrastructure. Public content, static assets and development tooling can sit elsewhere where the regulator allows it.
Design recovery first
An in-country primary site needs an in-country recovery site, and the failover has to be tested before go-live, not after the first outage.