When enrolling with the 2FA take a screenshot of the QR code, print it and add it to wherever you keep your secure documents. The QR code is your private key, just scan it again to add a new device if you lose your original.
Obviously you need to keep the code secure!
AWS/Azure are incredibly expensive compared to most hosting providers. If you need the services and scale they provide then they can be good value but there are for sure expensive.