Some form of demand control is generally how you work around these problems, but maybe those parts are falling over too.

For really big services it's also hard to exercise these processes on anything approaching actual prod scale. Ideally you can chop the architecture into pieces where you can simulate region failure and ensure everything works as planned, and fix whatever you find that breaks with every simulation.

But maybe some bits of the architecture aren't amenable to being regionalized.