Ideas for
your next move.

Practical thinking for teams building software, securing systems and operating modern infrastructure. Explore our engineering field notes.

600 insights · Page 43 of 50

ENGINEERING JOURNAL ↗

AWS Operations

AWS Backup Restore Testing: Prove the Business Recovery Path

Plan AWS Backup restore testing with eligible recovery points, isolated validation and measured recovery evidence. Distinguish a restored resource from a working application.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon EBS Resizing: Why the Linux Filesystem Still Looks Full

Review EBS growth across volume, partition and filesystem layers. Includes read-only inspection, backup prerequisites and a controlled application storage verification SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon EFS Mount Timeouts: Follow DNS, Network and Client Evidence

Investigate EFS mount failures using filesystem identity, mount targets, NFS reachability and Linux client evidence. Includes setup planning and file-service recovery checks.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon SQS Dead-Letter Queues: Investigate Before Redrive

Operate SQS dead-letter queues with failed-message classification, corrected consumers and controlled redrive. Includes setup prerequisites, idempotency and backlog monitoring.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

DynamoDB Throttling: Review Demand and Key Distribution

Investigate DynamoDB throttling using request evidence, capacity mode and access-key distribution. Includes setup assumptions, bounded retries and latency verification.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

CloudWatch Alarms Without Notifications: Trace the Alert Chain

Troubleshoot CloudWatch alarm notifications from metric dimensions and state transitions through the notification destination. Includes setup validation and an alerting SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

AWS KMS Access Denied: Review the Complete Permission Boundary

Investigate KMS denied operations using caller identity, key policy and request context. Preserve encryption while correcting the smallest justified access requirement.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Secrets Manager Rotation: Investigate Application Startup Failures

Review AWS Secrets Manager rotation failures with active identity, region, secret version and application initialization evidence. Includes verification and a credential-change SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Session Manager TargetNotConnected: Check Identity and Reachability

Diagnose AWS Systems Manager Session Manager connection failures using managed-node status, agent and endpoint evidence. Includes access setup and a secure administration SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

Amazon SES SMTP Failures: Separate Login, Sending and Delivery

Troubleshoot SES SMTP authentication and rejected sending with region, identity and transport checks. Includes safe setup, delivery evidence and an email operations SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

CloudFront Origin Errors: Separate Cached Failure from Current Health

Diagnose CloudFront error responses with origin evidence, cache behavior and hostname checks. Includes deployment prerequisites, recovery validation and edge monitoring.

Read field note ↗

ENGINEERING JOURNAL ↗

AWS Operations

AWS Lambda in a VPC: Troubleshoot Outbound Timeouts

Investigate VPC-connected Lambda timeouts using destination, subnet routes and endpoint design. Includes setup checks, dependency verification and latency monitoring.

Read field note ↗