Assessing Application Fault Tolerance with AWS Resilience Hub - Visualizing RTO/RPO Target Achievement
Learn how to assess application fault tolerance with Resilience Hub, configure RTO/RPO policies, and leverage improvement recommendations.
Operations Management
Articles on CloudWatch, Systems Manager, Config, and other operations management services
Implementing Feature Flags with AWS AppConfig - Safe Configuration Deployment and Rollback
Roll out configuration changes independently from code deployments using Linear and Exponential strategies. Ensure safety with automatic rollback triggered by CloudWatch alarms.
Reviewing Workloads with the AWS Well-Architected Tool - Architecture Improvement Based on Six Pillars
Quantify risks through architecture reviews based on six pillars, add organization-specific best practices with custom lenses, and track improvement progress with milestones.
Multi-Account Management with AWS Organizations - OU Design and Governance with SCPs
Establish governance for multi-account environments through OU hierarchy design and SCP-based access control. Also covers cost management with consolidated billing.
Practicing Infrastructure as Code with AWS CloudFormation - Template Design and Stack Management
Define infrastructure with templates and preview impact with change sets before deployment. Detect configuration drift with drift detection and deploy across your entire organization with StackSets.
Cross-Account Resource Sharing with AWS RAM - Sharing VPC Subnets and Transit Gateways
Learn how to share VPC subnets and Transit Gateways across accounts to centralize IP address space management and reduce VPC peering connections.
API Audit Logging with AWS CloudTrail - Trail Design and Security Analysis
Record all API activity and run advanced analysis with SQL queries in CloudTrail Lake. This article covers automatic anomaly detection with Insights and real-time detection through EventBridge integration.
Continuous Compliance Monitoring with AWS Config - Rule Evaluation and Auto-Remediation
Learn how to record resource configurations with AWS Config, evaluate compliance using Config rules, and set up auto-remediation actions.
Centralizing SaaS Audit Logs with AWS AppFabric - OCSF Standardization and Security Lake Integration
Learn how AppFabric collects audit logs from SaaS applications, standardizes them to OCSF format, and builds analysis pipelines.
Getting Started with AWS Operations Instantly Using AWS CloudShell - A Guide to the Browser-Based Shell Environment
Launch with a single click from the console and start working immediately in an environment with AWS CLI, SAM CLI, and CDK pre-installed. Scripts are preserved with 1 GB of persistent storage.
Amazon CloudWatch Internet Monitor - Instantly Detect ISP Outages and Visualize User Impact
CloudWatch Internet Monitor continuously monitors the availability and performance of end users accessing your application over the internet, broken down by ISP, city, and ASN. Leveraging AWS global network observability data, it provides an integrated workflow from detecting performance degradation to supporting DNS routing failover decisions.
Building a Multi-Account Environment with AWS Control Tower - Landing Zone and Guardrails
Establish governance for your multi-account environment with automated landing zone construction and guardrail-based policy enforcement. Also covers automated account creation with Account Factory.
Building Incident Management with AWS Health Dashboard - Automating Outage Notifications and Impact Analysis
A comprehensive guide covering service outage detection, automated notifications via EventBridge integration, and organization-wide impact analysis through Organizations integration.
Centralized Backup Management with AWS Backup - Backup Plans and Cross-Region Protection
Manage backups for EC2, RDS, DynamoDB, and more under a unified policy. Covers Vault Lock WORM protection and automated restore testing.
Optimizing Your AWS Environment - Best Practice Checks with Trusted Advisor
Learn how to use AWS Trusted Advisor for automated environment diagnostics. This article covers the check items and usage across five categories: cost optimization, security, fault tolerance, performance, and service limits.
IT Governance with AWS Service Catalog - Standardizing Approved Products and Enabling Self-Service
Learn how to catalog IT-approved CloudFormation templates and safely provide end-user self-service through launch constraints and template constraints.
Building Unified Monitoring with Amazon CloudWatch - Designing Metrics, Logs, and Alarms
Build unified monitoring with the three pillars of metrics, logs, and alarms. This article covers interactive analysis with Logs Insights, high-precision notifications with composite alarms, and leveraging Embedded Metric Format.
Lessons from AWS Incident Reports (COE) - How Past Major Outages Shaped Design Principles
Analyze the root causes of past major incidents including the S3 outage, us-east-1 DNS failure, and Kinesis outage from AWS's published Correction of Errors (COE) and incident reports, and explain how they changed AWS's design principles.
The Essence of Undifferentiated Heavy Lifting - The Boundary Between What AWS Solves and What It Doesn't
Dig into the true meaning behind AWS's frequently used phrase "Undifferentiated Heavy Lifting," examining the responsibility boundaries of managed services, the reality of the shared responsibility model, and the illusions and realities of fully managed services.
Fleet Management with AWS Systems Manager - Automating Patch Management, Inventory, and Run Command
Automate patch management with Patch Manager, streamline remote operations with Run Command, and enable SSH-free shell access with Session Manager.
Procuring Software on AWS Marketplace - SaaS Subscriptions and Private Offers
Procure third-party software in three delivery models (AMI, container, SaaS) and consolidate billing with AWS. Learn about organization-wide governance with Private Marketplace and automating contract management.
ML-Based Operational Anomaly Detection - Catching Issues Early with Amazon DevOps Guru
Learn how Amazon DevOps Guru uses ML to detect operational anomalies, including automatic CloudWatch metrics analysis, proactive anomaly detection, recommended actions, and CloudFormation stack-level monitoring.
Managing Configuration and Secrets with AWS Systems Manager Parameter Store - Hierarchical Structure and Encryption
Learn how to manage configuration values and secrets with Parameter Store, design hierarchical parameter structures, and choose between Parameter Store and Secrets Manager.
DevOps Notifications with AWS Chatbot - Integrating AWS Events with Slack and Teams
Learn how to deliver CloudWatch alarm and CodePipeline notifications to Slack and Teams, and build a ChatOps environment where you can operate AWS using @aws commands from chat.
Building a Unified Observability Dashboard with Amazon Managed Grafana
Learn how to build a multi-source observability dashboard by integrating CloudWatch, Prometheus, and OpenSearch data sources.
Container Monitoring with Amazon Managed Service for Prometheus - Collecting and Analyzing EKS Metrics
Collect EKS/ECS metrics in a Prometheus-compatible format and query them with PromQL. Learn how to build a container monitoring platform integrated with Managed Grafana.
Monitoring Frontend Performance with Amazon CloudWatch RUM - Real User Monitoring
Simply embed a JavaScript snippet to collect page load times, Web Vitals, JS errors, and HTTP errors in real time. This article explains how to visualize frontend quality using session replay and custom events.
Architecture Review - Systematically Evaluate Workloads with the AWS Well-Architected Tool
Learn about architecture reviews using the AWS Well-Architected Tool. Covers evaluation based on the six pillars, improvement planning, and custom lens usage.
Why AWS Service Quotas Exist - Multi-Tenant Design That Protects Shared Infrastructure
Explain how AWS service quotas (formerly service limits) are not mere restrictions but a design to protect other customers in a multi-tenant environment, covering the noisy neighbor problem, soft vs hard limits, and what happens behind quota increase requests.
Streamlining Systems Operations - Building a Unified Operations Platform with Systems Manager
Learn how to design systems operations management with AWS Systems Manager, including patch management, Parameter Store, and operational automation using Run Command.
Tag Design Determines Operations - Trivia and Practical Naming Conventions for AWS Resource Tagging Strategy
We explain why AWS resource tags are not just labels but the foundation for cost allocation, access control, and automation, covering tag key naming conventions, how to use the 50-tag limit, and governance through tag policies.
Audit Log Design and Operations - Complete API Activity Recording with CloudTrail
Learn how to design audit logs using AWS CloudTrail, including recording API activity, long-term storage in S3, and compliance automation through integration with AWS Config.
Why CloudWatch Has 1-Minute and 5-Minute Metrics - The Trade-off Between Monitoring Granularity and Cost
This article explains the technical and economic reasons behind the split between CloudWatch basic monitoring (5 minutes) and detailed monitoring (1 minute), the step-down aggregation of metric retention periods, and the high-resolution mode for custom metrics.
Most Common Well-Architected Review Findings - 5 Design Mistakes Engineers Overlook
Covers the most frequently flagged design issues in AWS Well-Architected Reviews, focusing on five areas: single-AZ deployment, missing backups, underutilized logging, neglected cost optimization, and overly permissive security groups.
How AWS Keeps Time Internally - Amazon Time Sync Service and Leap Second Smearing Design
Learn how Amazon Time Sync Service works, how GPS and atomic clocks provide high-precision time sources, the design decision to absorb leap seconds through smearing, and why time synchronization matters in distributed systems.
ChatOps Notification Platform - Operations Automation with AWS Chatbot
Learn how to build a ChatOps notification platform using AWS Chatbot. Covers AWS event notifications to Slack and Microsoft Teams, instant delivery of CloudWatch alarms, and automating incident response through SNS integration.
IT Service Provisioning - Self-Service Infrastructure Delivery with AWS Service Catalog
Learn how to catalog approved IT services with AWS Service Catalog and enable self-service infrastructure provisioning through CloudFormation integration. This article covers operational patterns that maintain governance while empowering development teams.