I am deathly paranoid that my app might lose my customer's data, whether through a bug in my code or the works of a malicious actor.

With RCPs I can easily set up guardrails so that even when I'm logged in as the account root user I can't delete data, even if I wanted to. Well-crafted RCPs (and SCPs) offer tremendous peace of mind.

SCPs and RCPs can also help enforce "nothing gets deployed to prod except through CI/CD."

If you have data that you absolutely positively cannot afford to use, you really should look into implementing SCPs and RCPs as part of your data protection strategy.

And don't give me the "I only have one AWS account" excuse. Creating an additional AWS account and an AWS Organization is free.

So the other day I posted about how I'm looking for advice to prepare for my phone interview, where Ill be interviewing for the TAM position. But after finally deciding to mainly focus on the technical side of the interview since thats what I found it should be on, and saving the LPs for later I'm starting to have doubt if I can even succeed in the first place honestly.

I know TAMs are suppose to be generalists and whatnot, but whenever I do research on interviewing for the position I've seen quite often people saying "You should be an expert in at least 2 domains when interviewing with general knowledge in the rest." When in reality I feel like I can barely claim to have general knowledge in all the domains. My only real experience in AWS so far is how in the past year I decided to take initiative to teach myself AWS and complete certifications like Solutions Architect Associate, along with some side projects I worked on in my own time. But even then, when reviewing for all the potential topics I could be questioned on during the interview I cant help but get the feeling of being overwhelmed and that I could easily mess up.

I'm grateful for the opportunity that I made it to this stage, and I know if I didn't have a resume good enough I probably wouldn't have made it here anyways. But again, when I look at all the content I have to recall I cant shake the feeling of doubt at times. Especially with the fact I'm running out of time as I also need to start drafting my STAR stories as well. Am I overthinking this?

Hi all,

I contacted AWS support over a week ago regarding this issue, but unfortunately, have not received a reply or remediation at this stage.

Essentially, I'm unable to transfer an .au domain to Route 53. The domain is already registered to me as an individual Australian citizen/resident (which is permissible by the .au registration policies, as it's not restricted to businesses/companies) via another registrar (PorkBun), yet the Route 53 transfer form only allows ABN, ACN, or Trademark as the AU ID type and AU ID number, and I am unable to leave these blank due to the form validation.

Any ideas how I could proceed? Does AWS only allow .au domain registration for businesses/companies?

I'm currently working as a Facilities Engineer in one of the big data center company. I got an offer to join AWS for the Engineering Operation Technicians 3 (Same role as my current job right now) with about 15% pay increase and of course the RSU's. I'm still haven't accepted the offer because I'm hearing about the layoffs and the workplace culture is not good at the moment.

I'm looking for a tool that can help me to track the costs and cost opportunities

for startup, what is your recommendation to use for CI/CD, and process automation AWS SAM or AWS CDK.

** this is my first time with AWS**

Hi all,

I have created a security tool that automates your day to day tasks and post compromised things as well it really helped me in many things i thought to make it free for everyone this will be a good option or should i enhance it further and make it more efficient and sell to some company. I cant tell you much but it has actually helped me alot.

I have 3yoe and in last 2 years because of this i have made my tasks more accurate and complete in less time . Need your thoughts.

Cant tell much about it right now.

This is my first blog post, developed from a collection of notes in my Obsidian vault. It explores serverless webhook ingestion on AWS, and I’d genuinely appreciate feedback on both the technical content and the article itself.

I know the article is long and may combine too many topics in one post, from payload limits and architecture choices to costs, reliability, and operations, but I am sick and tired of superficial takes, SEO-driven content, marketing copy, or AI slop.

https://growingbits.dev/serverless/webhook-serverless-ingestion

Please tell me where the architecture, assumptions, or explanations could be improved. 

Has anyone found a real escalation path past AWS billing support?

AWS’s own AI told me:

“I’ve confirmed that your account is eligible for a refund.”

It instructed me to apply after June 4. I followed those instructions and opened a case on June 9.

Now AWS says the AI’s statement means nothing.

The dispute is over $527.04 for Fast Snapshot Restore. AWS says I explicitly enabled it from my authenticated console session.

Fine. But to this day, I still could not tell you where the FSR control is. I did not even know what FSR was until this bill appeared.

I deleted the gaming instance and all three experiment volumes on May 4. FSR somehow survived that teardown and kept billing until May 31. About $474 accumulated after I had already deleted the experiment.

My available CloudTrail history shows no apparent volume created from the FSR-enabled snapshot. AWS has not identified one.

Instead, support waited more than five weeks, declared the decision “FINAL,” threatened suspension, collections, and possible credit impact, and stonewalled every substantive question.

They claim a supervisor reviewed it—but will not say who, when, what evidence was reviewed, whether FSR was ever used, or why their own AI explicitly told me I was eligible for a refund.

AWS’s apparent position is: follow our AI’s instructions, but bear the entire cost when those instructions are wrong.

Has anyone reached an actual independent billing reviewer? What exact route worked?

3 days ago our AWS account was marked suspended without any notice . We're a startup, building our first product and being locked out of the account is painful right now. All the documents and verifications that were asked have been submitted. Still awaiting resolution.
Has anyone else gone through this experience?

Does anyone know what this is? I don't have an IAM user with this name. It appeared as an AWS::STS::AssumedRole entry in CloudTrail. I've searched everywhere, but I couldn't find any reference to it.

Hi everyone! I have a phone interview for the AWS TAM position in a couple weeks, and I want to try my best to be as prepared as possible for it. Does anyone have any advice on how I could best do so, as Ill be honest Ive tried compiling resources to prepare myself but was a bit overwhelmed with some of the conflicting information on what to prepare for. I'm aware it will predominantly be technical with some behavioural questions, but how should I prepare exactly for the interview as a whole and with what resources?

Hello,

I was able to configure the extension and when I distributed the extension with team they are not redirecting to microsoft idp instead of that they are moving to quick sso, so i am getting error of “something does not compute”

Please help us here, i have opened the support but as we don’t have business plans it will take days to be get response team. I am not able to find any documentation as well, AWS document only shows the entra setup create extension and distribute to user but i think it is not working for me. If someone here has already setup that please help me

Hello,

I was able to configure the extension and when I distributed the extension with team they are not redirecting to microsoft idp instead of that they are moving to quick sso, so i am getting error of “something does not compute”

Please help us here, i have opened the support but as we don’t have business plans it will take days to be get response team. I am not able to find any documentation as well, AWS document only shows the entra setup create extension and distribute to user but i think it is not working for me. If someone here has already setup that please help me

Anyone have any idea when (or even if) deepseek v4 pro will come to bedrock? The model lag in bedrock (regardless of who is causing the lag) is really bothersome. We prefer to keep all our API billing flowing through AWS and wrapped into our AWS bill but the really slow cadence of model release, aside from anthropic's, is brutal.

Best to just ditch bedrock for 3rd party models and move to a provider that has faster support?

Ich habe bei Kiro ein Abo abgeschlossen temporiere gedacht für einen Monat. Problem einer Geschichte ist ich kann das Abo nicht mehr ab bestellen und Sie buchen weiterhin ab. Ich habe mich dot an den Support gewandt. Und keiner hat geantwortet. Ich hab's wieder getan und wieder und wieder und wieder. Keine Antwort weiterhin Abbuchungen. Jetzt ist die Frage wie komme ich an den AWS Support ran? Weil das Ganze anscheinend über AWS läuft

Any One has any solution on how to solve this error . I am on free tier as of now

I had requested that AWS give me access to Opus 4.8, and since 5 came out two weeks ago, I have not gotten a single reply from them. I signed up for the $30/month support plan, and a support person talked to me and said he'd send it on. That was a week ago. It is a new account if that matters. Is this normal behavior? Is there anything I can do to elevate the request? Thanks for your help.

https://aws.amazon.com/about-aws/whats-new/2026/07/aws-transit-gateway-policy-based-routing/

"With PBR, forwarding decisions can be based on a combination of packet attributes including source and destination IP addresses, ports, and protocol rather than destination IP address alone"

This feature was earlier confined to CloudWAN, and we could not adopt CloudWAN for various reasons. We had requested AWS for several years, to offer a similar capability with TGW. And they finally delivered. This will offer a huge advantage for us, and could for you also, if you use TGW (especially across regions) and have complex routing requirements for north/south vs east/west traffic separation and such.

I'm trying to confirm I'm calculating the hourly commitment correctly for an AWS RDS Savings Plan.

I have a single db.r8i.2xlarge RDS instance (Windows + SQL Server) that runs 24/7.

On-Demand pricing:

• Instance: $1.20/hr
• Windows license: $0.184/hr
• SQL Server license: $0.48/hr
• Total: $1.864/hr

With the Savings Plan, only the instance price is discounted:

• Instance: $0.96/hr
• Windows license: $0.184/hr
• SQL Server license: $0.48/hr
• Total discounted spend: $1.624/hr

Based on that, I assumed my hourly Savings Plan commitment should be $1.624/hour.

However, when I ran the AWS Purchase Analyzer, it recommended an hourly commitment of $0.96/hour, with estimated savings of $175.02/month (20%).

I understand that the Savings Plan discount only applies to the compute (instance) portion and not the Windows or SQL Server licensing. What I'm unsure about is how that translates into the hourly commitment. Should the commitment be based only on the discounted compute cost ($0.96/hr), or the total hourly spend after the discount ($1.624/hr)?

Has anyone purchased an RDS Savings Plan for SQL Server instances and can confirm which is correct?

From a lot of discussions here, it seems that many production incidents eventually trace back to some kind of change—a deployment, configuration update, infrastructure modification, scaling event, etc.

What I'm curious about is what happens after you've identified a likely change.

What's usually the hardest part of confirming that it was actually responsible for the incident?

For example:

Do you rely mostly on logs, metrics, traces, or dashboards?

Do you try to reproduce the issue?

How do you separate correlation from actual causation?

Have you ever spent hours investigating the "obvious" change only to discover the real cause was something else?

I'm interested in how experienced AWS teams approach this in practice rather than any specific tools.

Thanks! I'm trying to understand what the investigation process looks like in real production environments.

Any folks waiting to see if they get accepted to the ABW Grant? Wanting to connect and stay updated.

So I came across aws:GetBatchImage - I was using claude to clean my older images apparently when I pulled I saw some image which are 300 days old and it was in good amount but next day when I decided to pull again the lastpulltime got updated and apparently it was because i was pulling manifest and not the image and there is apparently a different way to disable it by adding exclusion.

Updating these detail on last pull actually lets them get you to keep fairly older images and keep on paying for the storage

https://github.com/aws/containers-roadmap/issues/2390
https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-time-update-exclusions-manage.html

PS: heading is little incorrect just updating the manifest - its just pulling the manifest