Ideas for
your next move.

Practical thinking for teams building software, securing systems and operating modern infrastructure. Explore our engineering field notes.

550 insights · Page 39 of 46

ENGINEERING JOURNAL ↗

AWS Operations

Amazon EFS Mount Timeouts: Follow DNS, Network and Client Evidence

Investigate EFS mount failures using filesystem identity, mount targets, NFS reachability and Linux client evidence. Includes setup planning and file-service recovery checks.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon SQS Dead-Letter Queues: Investigate Before Redrive

Operate SQS dead-letter queues with failed-message classification, corrected consumers and controlled redrive. Includes setup prerequisites, idempotency and backlog monitoring.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

DynamoDB Throttling: Review Demand and Key Distribution

Investigate DynamoDB throttling using request evidence, capacity mode and access-key distribution. Includes setup assumptions, bounded retries and latency verification.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

CloudWatch Alarms Without Notifications: Trace the Alert Chain

Troubleshoot CloudWatch alarm notifications from metric dimensions and state transitions through the notification destination. Includes setup validation and an alerting SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

AWS KMS Access Denied: Review the Complete Permission Boundary

Investigate KMS denied operations using caller identity, key policy and request context. Preserve encryption while correcting the smallest justified access requirement.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Secrets Manager Rotation: Investigate Application Startup Failures

Review AWS Secrets Manager rotation failures with active identity, region, secret version and application initialization evidence. Includes verification and a credential-change SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Session Manager TargetNotConnected: Check Identity and Reachability

Diagnose AWS Systems Manager Session Manager connection failures using managed-node status, agent and endpoint evidence. Includes access setup and a secure administration SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon SES SMTP Failures: Separate Login, Sending and Delivery

Troubleshoot SES SMTP authentication and rejected sending with region, identity and transport checks. Includes safe setup, delivery evidence and an email operations SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

CloudFront Origin Errors: Separate Cached Failure from Current Health

Diagnose CloudFront error responses with origin evidence, cache behavior and hostname checks. Includes deployment prerequisites, recovery validation and edge monitoring.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

AWS Lambda in a VPC: Troubleshoot Outbound Timeouts

Investigate VPC-connected Lambda timeouts using destination, subnet routes and endpoint design. Includes setup checks, dependency verification and latency monitoring.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon ECS Unhealthy Services: Diagnose Repeated Task Replacement

Trace ECS task replacement through service events, container startup and health checks. Includes deployment prerequisites, verification and incident ownership.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon EKS Nodes Not Ready: Separate Platform and Workload Issues

Investigate EKS node readiness with node events, joining prerequisites and workload impact. Includes a setup baseline, controlled correction and platform SLO guidance.

Read field note ↗