Questions in Resilience

I have a web applications in AWS and I am considering enabling Cloudfront, WAF and R53. Before I was using multivendor DNS with hidden primary as best practice. Does it still make sense when using R53...

We are using **AWS OpenSearch Serverless** for our search workloads and have observed intermittent HTTP 4xx and 5xx errors over the past few months. While the scale of the issue is low, we are reachin...

I have a ECS cluster running Fargate profile and ECS service associated to public ALB (2 AZs), running one task. I´m trying to simulate an AZ failure blocking all traffic in one AZ using Network ACL. ...

IAM Identity Center controls access to its permission sets and applications from its primary Region only. Does this mean if the primary region is down, Nobody will be able to sign in? or the services...

Hi, I have AWS environment which uses IAM Identity Centre. Users are created in Active Directory and synced across AWS and they can access AWS. I want to create emergency access account to access AWS...

I have several EB clusters, with capacity scaling based on CPU usage. For each cluster, the idle state is just 1 instance, and it will scale-up from there based on load. But what about if an instance...

Why does Auto-Recovery Behavior not occur even when System Checked Failed occurs despite setting the Auto-Recovery Behavior option to Default (On) on the EC2(T2.micro, Ubuntu(22.04)) instance? And, Ho...

We have 2 AWS regions in active mode. Services in Region-1 and Region-2 have health checks registered with Route53 which is setup for 'latency based routing'. The Route53 TTL is 30 seconds. Here is t...

In reading up on Transfer Family resiliency [here](https://docs.aws.amazon.com/transfer/latest/userguide/disaster-recovery-resiliency.html), it says "Transfer Family supports up to 3 Availability Zone...

Hi AWS, there is a question: A company runs a website that uses a content management system (CMS) on Amazon EC2. The CMS runs on a single EC2 instance and uses an Amazon Aurora MySQL Multi-AZ DB inst...

When building an AWS site to site VPN each tunnel of the VPN connection gives me a different outside IP address for the AWS Virtual Private Gateway, which is a good practice for redundancy reasons, as...

If the Availability Zone has been wiped off the map and is never coming back, any guaranteed RTO for all services?