Let’s talk
INSIGHTS / KNOWLEDGE, SHARED

Ideas for
your next move.

Practical thinking for teams building software, securing systems and operating modern infrastructure. Explore our engineering field notes.

500 insights · Page 22 of 42

AWS Backup Cross-Account Copies: Trace the Trust Path — conceptual 3D-style vector showing Source account, Copy role, Source key, Destination vault, Destination key, Copy job.ENGINEERING JOURNAL ↗
AWS Operations

AWS Backup Cross-Account Copies: Trace the Trust Path

Diagnose cross-account AWS Backup copies by checking organization membership, destination-vault policy, source-role permissions, and resource-specific encryption.

Read field note ↗
AWS Backup Vault Lock: Choose Retention Deliberately — conceptual 3D-style vector showing Backup plan, Vault Lock, Recovery point, Retention clock, Review record.ENGINEERING JOURNAL ↗
AWS Operations

AWS Backup Vault Lock: Choose Retention Deliberately

Choose AWS Backup Vault Lock settings with a tested retention policy, a clear grace-period decision, and evidence that recovery points meet the intended rules.

Read field note ↗
Azure Update Manager: verify dynamic scope at the scheduled run — conceptual 3D-style vector showing Fleet Filter, Run Membership, Patch Window, Postpatch Check.ENGINEERING JOURNAL ↗
Azure Operations

Azure Update Manager: verify dynamic scope at the scheduled run

Plan Azure Update Manager schedules with runtime-evaluated scope, platform prerequisites and maintenance acceptance so tag changes do not silently alter fleet coverage.

Read field note ↗
Azure VM health signals: distinguish platform status from guest and user impact — conceptual 3D-style vector showing Platform State, Guest Agent, App Workflow, Incident Timeline.ENGINEERING JOURNAL ↗
Azure Operations

Azure VM health signals: distinguish platform status from guest and user impact

Investigate Azure VM incidents by comparing Resource Health, guest heartbeat and a representative application operation instead of treating one signal as complete availability.

Read field note ↗
Azure Managed Prometheus: find the collector that owns the target — conceptual 3D-style vector showing Service Labels, Scrape Owner, Target Metrics, Workspace Query.ENGINEERING JOURNAL ↗
Azure Operations

Azure Managed Prometheus: find the collector that owns the target

Troubleshoot Azure Managed Prometheus by locating the responsible collector, validating target discovery and checking scrape and ingestion evidence separately.

Read field note ↗
Azure resource logs missing: verify categories, routing and fresh events — conceptual 3D-style vector showing Resource Event, Category Select, Destination, Query Table.ENGINEERING JOURNAL ↗
Azure Operations

Azure resource logs missing: verify categories, routing and fresh events

Set up Azure diagnostic settings and investigate missing resource logs through supported categories, destination tables and fresh event generation.

Read field note ↗
Application Insights trace gaps: review sampling across service boundaries — conceptual 3D-style vector showing Root Request, Trace Context, Sampled Spans, Trace View.ENGINEERING JOURNAL ↗
Azure Operations

Application Insights trace gaps: review sampling across service boundaries

Diagnose incomplete Application Insights traces by following propagation, sampling decisions and export paths without treating sampled telemetry as lost business work.

Read field note ↗
Patch Manager compliance: distinguish missing patches from stale assessment — conceptual 3D-style vector showing Patch Baseline, Node Assess, Install State, Service Verify.ENGINEERING JOURNAL ↗
AWS Operations

Patch Manager compliance: distinguish missing patches from stale assessment

Interpret AWS Patch Manager compliance using baseline scope, assessment freshness and reboot-related state before declaring a server patched or scheduling a restart.

Read field note ↗
Managed Prometheus ingestion gaps: separate scraping from remote write — conceptual 3D-style vector showing Scrape Target, Remote Write, Workspace Ingest, Query Series.ENGINEERING JOURNAL ↗
AWS Operations

Managed Prometheus ingestion gaps: separate scraping from remote write

Diagnose Amazon Managed Service for Prometheus ingestion by tracing scrape health, remote-write identity, endpoint selection and bounded label cardinality.

Read field note ↗
HTTP API access logs: make gateway failures traceable by request ID — conceptual 3D-style vector showing Http Stage, Request Id, Integration, Access Log.ENGINEERING JOURNAL ↗
AWS Operations

HTTP API access logs: make gateway failures traceable by request ID

Configure API Gateway HTTP API stage access logs with safe correlation fields, then distinguish missing logging from integration failures and backend application errors.

Read field note ↗
ALB access logs missing: validate the logging bucket contract — conceptual 3D-style vector showing Alb Request, Log Delivery, Bucket Policy, Request Evidence.ENGINEERING JOURNAL ↗
AWS Operations

ALB access logs missing: validate the logging bucket contract

Set up and diagnose Application Load Balancer access logs with the correct S3 Region, supported encryption and delivery policy before relying on request evidence.

Read field note ↗
CloudTrail event history is visible but trail delivery is missing — conceptual 3D-style vector showing Management Event, Trail Delivery, S3 Audit Store, Freshness Check.ENGINEERING JOURNAL ↗
AWS Operations

CloudTrail event history is visible but trail delivery is missing

Diagnose AWS CloudTrail trail delivery separately from Event history, checking logging state, S3 permissions and delivery errors without assuming audit retention is healthy.

Read field note ↗