What do OJK rules mean for Indonesian banks moving core systems to public cloud?

Article 35 of POJK 11/POJK.03/2022 requires a commercial bank's data centre and disaster recovery centre to be in Indonesia, with placement abroad only by OJK permission, which rules out a foreign cloud region by default. It does not rule out public cloud: Google Cloud has had a Jakarta region since June 2020 and AWS since December 2021, and Microsoft's Indonesia Central region became generally available in April 2025. Microsoft says BCA is among the more than 100 organizations that had onboarded to its region by the May 2025 launch.

How does the 2024 ransomware attack on the temporary national data centre affect cloud strategy for Indonesian businesses?

The June 2024 attack hit PDNS 2, the temporary national data centre facility in Surabaya, not the permanent PDN, and Telkom's disclosure to OJK counted 239 affected tenants as of 26 June. It prompted the government to rebuild with a more serious security posture. For businesses working with government clients or in regulated industries, understanding PDN's architecture and certification requirements is increasingly important, and hybrid cloud architectures that combine PDN with commercial cloud are common in the public sector segment.

Why does the post recommend Terraform specifically for the Indonesian multi-cloud landscape?

Most large Indonesian organizations run multiple cloud providers simultaneously — GoTo uses GCP primarily but also AWS, while banks often run Azure for Microsoft workloads and AWS for data services. Terraform's provider-agnostic approach lets engineers manage resources across AWS, Azure, and GCP with a single toolchain, making it especially valuable in this multi-cloud environment. Fundamental cloud concepts like VPC networking, IAM, and container orchestration also transfer across providers even when CLI commands differ.

What cloud skill combination does the post identify as the highest-opportunity gap in Indonesia's market?

The post identifies understanding Indonesian data sovereignty regulations — specifically PDN, OJK, and UU PDP — combined with cloud technical skills as the rarest and most valuable combination in the market. Almost nobody holds both, yet nearly every cloud architecture engagement for Indonesian enterprise or government clients touches regulatory requirements. For the next 3–5 years, positioning around AI infrastructure and cloud security is also highlighted as the highest-return skill investment.

Cloud Adoption in Indonesian Companies: The Real Picture

Q: What caused cloud cost shock in Indonesian companies, and how can it be avoided?

Many Indonesian companies migrated to cloud attracted by flexible pricing, then received bills far exceeding their on-premise costs due to inefficient resource provisioning. Common culprits include dev/test environments left running 24/7, over-provisioned compute instances, lack of auto-scaling, and unanticipated data transfer costs. The post recommends building cost monitoring tools like AWS Cost Explorer and right-sizing reviews into the initial architecture design rather than addressing them after the first shocking invoice.

Indonesia's cloud market hit USD 2.46 billion in 2025 — but adoption patterns vary wildly by sector. Here's what's actually happening on the ground.

Key Takeaway

Indonesia's cloud market is projected to reach USD 5.5 billion by 2031 at 14.32 percent CAGR, but the aggregate hides very different sector patterns. Banking and financial services took 27 percent of it, while adoption elsewhere is shaped more by data residency rules than by cost.

Indonesia's cloud market is one of Southeast Asia's fastest-growing, projected to reach USD 5.5 billion by 2031 at 14.32% CAGR. But aggregate market numbers obscure the radically different adoption patterns across sectors. Banking and financial services (which captured 27% of the market in 2025) are cloud-native at the application layer but constrained by OJK regulations on data residency. Large manufacturing and distribution conglomerates are migrating SAP to cloud. SMEs are adopting cloud-delivered SaaS without realizing it. And the Indonesian government is building a national data center (Pusat Data Nasional) that will reshape public sector cloud strategy. Building on cloud infrastructure regularly, here's what I see.

Market Overview: Who's Doing What

Large enterprises delivered 72% of Indonesia's cloud market revenue in 2025, leveraging scale to negotiate enterprise-grade SLAs with AWS, Azure, and GCP. AWS has a strong presence with Tokopedia, Traveloka, and Lion Air as reference customers. Microsoft Azure Indonesia Central became generally available in April 2025 and was formally launched in May — the first Azure region in Indonesia — and at the launch Microsoft said more than 100 organizations had onboarded, including Adaro, BCA, Binus University, and Telkom Indonesia. Google Cloud has significant traction at GoTo (the Gojek-Tokopedia merged entity) and in the analytics/ML space. For developers, the practical implication is that cloud certifications (AWS, Azure, GCP) are increasingly prerequisites for enterprise tech roles.

Banking and Financial Services: Cloud With Constraints

Indonesian banking and fintech are aggressive cloud adopters at the application and analytics layer, but constrained at the data layer by OJK (Otoritas Jasa Keuangan) rules: Article 35 of POJK 11/POJK.03/2022 requires a commercial bank's data centre and disaster recovery centre to be in Indonesia, with placement abroad only by OJK permission. That never ruled out public cloud as such, because in-country regions arrived well before Azure: Google Cloud opened its Jakarta region in June 2020 and AWS its Jakarta region in December 2021. Azure Indonesia Central, generally available since April 2025, adds another in-country option for Microsoft-centred workloads. Bank BCA, Bank Mandiri, and DANA (a leading digital wallet) are all accelerating cloud migration. The skills in demand at these institutions: Azure or AWS architecture, network security, and compliance-aware infrastructure design.

SMEs: Cloud Without Knowing It

Indonesia's 65+ million SMEs (UMKM) are adopting cloud at a remarkable rate — but mostly through SaaS applications rather than direct IaaS or PaaS consumption. Accounting software like Jurnal.id (now Mekari Jurnal), HR platforms like Talenta, and e-commerce platforms like Tokopedia and Shopee have moved millions of SME businesses onto cloud-hosted tools without those business owners needing to understand cloud infrastructure. The government's UMKM Go Digital program is accelerating this. For developers, this creates opportunity in building SaaS products targeted at Indonesian SMEs — a market that has money to spend on software and is actively looking for solutions.

Indonesia Cloud Market 2025
──────────────────────────────────────────────────────
Market size 2025:  USD 2.46 billion
CAGR:              14.32% → USD 5.5B by 2031

Provider market share (enterprise workloads):
  AWS       ~38%  GoTo, Traveloka, Lion Air, Tokopedia
  GCP       ~25%  GoTo (primary), analytics, ML workloads
  Azure     ~20%  BCA, Telkom, Adaro, Binus (since May 2025)
  Alibaba    ~8%  Chinese-connected companies, e-commerce
  Others     ~9%  DigitalOcean, local IDC providers

Top sector by revenue:
  Banking/fintech  27%  (OJK data residency constraints lifting)
  Telco            18%
  Retail/e-comm    15%
  Manufacturing    12%
  Government       11%  (PDN + SPBE initiatives)
──────────────────────────────────────────────────────

If you're building or maintaining cloud infrastructure for Indonesian clients, understand POJK 11/POJK.03/2022 on IT implementation by commercial banks, the OJK regulation that revoked and replaced POJK 38/POJK.03/2016 in 2022. Even if you're not directly in fintech, many Indonesian companies have fintech adjacency (payment processing, e-invoicing, payroll) that triggers financial services data handling requirements. Getting familiar with the regulatory framework makes you dramatically more valuable as a cloud architect or DevOps engineer in this market.

The Pusat Data Nasional Factor

Indonesia's Pusat Data Nasional (PDN) — National Data Center — is a major factor reshaping cloud strategy for government-adjacent businesses. In June 2024 ransomware hit PDNS 2, the temporary national data centre facility in Surabaya rather than the permanent PDN, and Telkom's disclosure to OJK counted 239 affected tenants as of 26 June. Since then the government has been rebuilding with a more serious security posture. For developers working with government clients or in regulated industries, understanding PDN's architecture and certification requirements is increasingly important. The government's preference for data sovereignty means hybrid cloud architectures (on-premise PDN + commercial cloud) are common in this segment.

Multi-Cloud Reality

Most large Indonesian organizations are not single-cloud — they're multi-cloud by accident or design. GoTo uses GCP primarily but also AWS for specific services. Banks often run Azure for Microsoft-integrated workloads and AWS for data services. This multi-cloud reality means cloud skills are more portable than the vendor wars suggest — the fundamental concepts (VPC networking, IAM, container orchestration, managed databases) transfer across providers even if the specific CLI commands differ. Terraform's provider-agnostic approach makes it especially valuable in this environment.


# Cloud cost optimization checklist for Indonesian deployments
cost_checks = {
  "dev_env":    "Auto-stop dev/test instances at 18:00 WIB",
  "rightsizing":"Review instance sizes quarterly vs actual CPU/mem",
  "autoscaling":"Set min=1, max=N; never always-on at peak size",
  "storage":    "Move cold data to cheaper tiers (S3 IA, GCS Nearline)",
  "egress":     "Use Cloudflare CDN to reduce cloud egress costs",
  "reserved":   "Buy 1yr reserved instances for stable baseline load",
}

# Example infra strategy (pragmatic approach)
infra = {
  "small_clients":  "DigitalOcean Droplet $12–24/mo + managed DB",
  "larger_clients": "GCP e2-medium + Cloud SQL (compliance-ready)",
  "cdn_dns":        "Cloudflare Free/Pro (everywhere)",
  "ssl":            "Let's Encrypt via certbot (all environments)",
}

What I Deploy on Cloud

My infrastructure approach is pragmatic: DigitalOcean droplets for smaller deployments (better cost-to-performance at small scale), Google Cloud when a project needs GCP-specific services or has compliance requirements, and Cloudflare everywhere for CDN, DNS, and DDoS protection. I don't reach for complex Kubernetes orchestration for most projects — Docker Compose on a managed VPS handles typical ERP workloads. The right cloud architecture is the one that matches the actual scale and operational capability of the team maintaining it.

Cloud cost management is a serious pain point for Indonesian companies in 2025. Many companies migrated to cloud attracted by flexible pricing, then received cloud bills far exceeding their on-premise costs because of inefficient resource provisioning. Common culprits: dev/test environments left running 24/7, over-provisioned compute instances, lack of auto-scaling, and data transfer costs not anticipated in the migration plan. If you're involved in cloud architecture for an Indonesian client, build cost monitoring (AWS Cost Explorer, GCP Cost Management) and right-sizing reviews into the initial design — not as an afterthought after the first shocking invoice.

Skills in Demand Across Indonesia's Cloud Market

Based on job listings and conversations with Indonesian tech recruiters, the most in-demand cloud skills in 2025 are: AWS Solutions Architect or GCP Professional Cloud Engineer certification (almost mandatory for enterprise roles); Terraform for infrastructure-as-code (the most commonly requested IaC tool); Kubernetes administration (CKA certification is a strong differentiator); cloud security (IAM, KMS, WAF configuration); and FinOps / cloud cost management. The least-demanded but most useful: understanding of Indonesian data sovereignty regulations (PDN, OJK, UU PDP) — almost nobody has this combined with cloud technical skills, creating real opportunity.

Where Indonesian Cloud Adoption Is Heading

The next wave of Indonesian cloud adoption will be driven by AI/ML workloads (every major Indonesian company is experimenting with LLM integration, driving GPU compute demand on AWS Bedrock and GCP Vertex AI), edge computing (for Indonesia's archipelago geography, edge nodes reduce latency for island-based users), and cloud-native government services (after the 2024 attack on the temporary national data centre, government digital services are moving toward more resilient cloud architectures). For developers and DevOps engineers, positioning around AI infrastructure and cloud security will be the highest-return skill investments for the next 3–5 years.

Cloud Adoption in Indonesian Companies: The Real Picture in 2025