AWS with AI
Build, debug, and secure AWS with AI — IAM and least privilege, VPC and networking, EC2/ECS/EKS, Lambda, S3, CloudFormation and CDK, and cost control.
42 copy-paste prompts · 68 in-depth guides Jump to prompts Jump to guides
Prompts
- Advanced
AWS Athena and Glue Query Cost Optimization Prompt
Cut Amazon Athena data-scanned cost and speed up queries by partitioning, converting to columnar formats, compacting small files, and fixing Glue Data Catalog table design without changing query semantics.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS CloudTrail Lake Threat-Hunting Investigation Prompt
Investigate suspicious AWS activity with CloudTrail Lake SQL — build queries to trace a compromised credential, unusual API calls, privilege escalation, and data exfiltration across accounts and time.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS Config Conformance Pack Compliance Review Prompt
Design and triage AWS Config rules and conformance packs so a multi-account estate is continuously evaluated against a compliance baseline, with remediation and noise control for NON_COMPLIANT findings.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
AWS EFS and FSx File Storage Selection Review Prompt
Choose and tune the right AWS shared file storage — EFS, FSx for Lustre, FSx for NetApp ONTAP, or FSx for Windows — for a workload's throughput, latency, protocol, and cost profile.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Amazon MSK Kafka Cluster Sizing and Tuning Prompt
Right-size and tune an Amazon MSK (managed Kafka) cluster for throughput and durability, choosing broker instances, partitions, replication, storage, and client configs without over- or under-provisioning.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS Organizations SCP Guardrail Design Prompt
Design Service Control Policy guardrails across an AWS Organization that block dangerous actions org-wide without breaking legitimate workloads, using deny-based boundaries and OU-aware scoping.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS PrivateLink and VPC Endpoint Design Prompt
Design VPC endpoint connectivity (Gateway, Interface/PrivateLink) so workloads reach AWS services and partner APIs privately, cutting NAT data-transfer cost and keeping traffic off the public internet.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
AWS Savings Plans and Reserved Instance Commitment Planning Prompt
Plan AWS Savings Plans and Reserved Instance commitments from real usage — decide term, payment option, and coverage across Compute/EC2 SP, RDS/ElastiCache/Redshift RIs, to maximize savings without over-committing.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS WAF Rule Tuning and False-Positive Triage Prompt
Tune AWS WAF web ACLs to block real attacks while eliminating false positives, using sampled requests and logs to right-size managed rule groups, rate limits, and custom rules before flipping to Block.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
ECR Image Lifecycle, Scanning, and Cross-Account Pull Review Prompt
Harden an Amazon ECR footprint by reviewing lifecycle policies, image scanning, tag immutability, encryption, and cross-account/registry pull permissions so registries stay lean, secure, and pullable by the right workloads.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
ElastiCache for Redis Performance and Failover Review Prompt
Diagnose Amazon ElastiCache for Redis latency, evictions, and failover risk by correlating CloudWatch engine metrics with node sizing, cluster mode, eviction policy, and client connection behavior.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
NAT Gateway and Data Transfer Cost Optimization Prompt
Cut AWS networking spend by tracing NAT Gateway processing charges and inter-AZ/inter-region data transfer to their source workloads, then redesign routing with VPC endpoints, AZ-affinity, and endpoint placement.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
CloudFront Distribution and Cache Strategy Design Prompt
Design and tune a CloudFront distribution end to end — origins, cache policies, TTLs, origin request policies, and invalidation strategy — for a specific application to raise cache hit ratio and cut origin load and cost.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
SSM Patch Management and Session Manager Review Prompt
Review and harden an AWS Systems Manager setup — patch baselines, patch groups, maintenance windows, and Session Manager access — to keep EC2 fleets compliant and remove SSH/bastion exposure.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Transit Gateway Multi-Account Network Design Prompt
Design a scalable, segmented multi-VPC / multi-account network on AWS Transit Gateway — route tables, attachments, propagation, and inspection — with clear isolation between environments and shared services.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
ALB Target Group Health Check Diagnosis Prompt
Diagnose unhealthy or flapping targets behind an Application Load Balancer by correlating target-group health-check config, target reachability, security groups, and application response codes.
- Claude
- ChatGPT
Open prompt - Advanced
Auto Scaling Group Scaling Policy Review Prompt
Review an EC2 Auto Scaling Group's scaling policies, health checks, and capacity settings to fix slow reactions, thrashing, or under/over-provisioning during traffic swings.
- Claude
- ChatGPT
Open prompt - Advanced
AWS Backup & DR RPO/RTO Resilience Review Prompt
Review AWS Backup plans, cross-region/account copies, and recovery procedures against stated RPO/RTO targets to find gaps that would block or slow a real recovery.
- Claude
- ChatGPT
Open prompt - Intermediate
EBS Volume & Snapshot Cost and Performance Review Prompt
Audit EBS volumes and snapshots for wasted spend (idle/unattached volumes, over-provisioned IOPS, stale snapshots) and performance bottlenecks, and recommend right-sized volume types.
- Claude
- ChatGPT
Open prompt - Advanced
EKS Node & Pod NotReady Triage Prompt
Triage NotReady EKS nodes and Pending/CrashLooping pods by correlating kubectl status, node conditions, resource pressure, and the CNI/kubelet so workloads schedule and stay healthy.
- Claude
- ChatGPT
Open prompt - Advanced
IAM AccessDenied Error Diagnosis Prompt
Pinpoint why an IAM principal gets AccessDenied by correlating the exact error message with identity policies, resource policies, SCPs, permission boundaries, and session context.
- Claude
- ChatGPT
Open prompt - Advanced
Least-Privilege IAM Design for a New Workload Prompt
Design a least-privilege IAM role and policy for a greenfield workload from its required AWS actions, scoping permissions with resources and conditions before any code ships.
- Claude
- ChatGPT
Open prompt - Advanced
VPC NACL & Subnet Routing Connectivity Review Prompt
Review network ACLs, route tables, and subnet layout to explain blocked or asymmetric VPC traffic, with attention to NACL statelessness, ephemeral ports, and routing to gateways.
- Claude
- ChatGPT
Open prompt - Intermediate
S3 Bucket Security & Public Access Audit Prompt
Audit an S3 bucket's security posture end to end: public access blocks, bucket policy, ACLs, encryption, versioning, logging, and TLS enforcement, and rank exposure risks.
- Claude
- ChatGPT
Open prompt - Intermediate
API Gateway Design and Debug Prompt
Choose between REST and HTTP API, design authorizers and throttling, and trace integration timeouts, CORS failures, and 5xx errors back to the exact stage that produced them.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS DynamoDB Single-Table Data Modeling Review Prompt
Review a DynamoDB schema against its real access patterns — partition/sort key choices, GSIs, item collections, and single-table design — before it ships and becomes expensive to change.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
EventBridge Rules and Pipes Design and Debug Prompt
Design event patterns, targets, and DLQs for EventBridge rules and Pipes, then trace why events fail to match, deliver, or get filtered.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
GuardDuty and Security Hub Finding Triage Prompt
Prioritize GuardDuty and Security Hub findings by real risk, suppress predictable noise with scoped rules, and map each finding to a concrete response so the security queue stays signal, not alert fatigue.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
KMS and Secrets Manager Rotation Review Prompt
Audit KMS key policies, grants, and envelope encryption alongside Secrets Manager automatic rotation so secrets rotate safely without locking out the workloads or operators that depend on them.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Route 53 Routing Policy and Health Check Design Prompt
Design failover, latency, weighted, and geolocation routing with health checks, then debug why DNS resolves to the wrong or unhealthy endpoint.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
AWS S3 Lifecycle and Storage Class Optimization Prompt
Design S3 storage-class transitions, lifecycle rules, and Intelligent-Tiering so you cut storage cost without breaking retrieval SLAs, retention requirements, or paying more in transition and request fees than you save.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
SQS and SNS Messaging Patterns and Triage Prompt
Design fan-out, FIFO, and DLQ topologies with SNS and SQS, then diagnose stuck, duplicated, out-of-order, or lost messages.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
AWS Step Functions Execution Debugging Prompt
Diagnose a failed or stuck Step Functions execution — retries, Catch handlers, IAM denials, timeouts, and payload-size limits — from the execution history, then fix the state machine without masking the real error.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
CloudWatch Logs Insights and Alarm Design Prompt
Write precise CloudWatch Logs Insights queries to find the signal in noisy logs, then design alarms that page on real problems without flapping.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
AWS Cost Optimization and Anomaly Triage Prompt
Triage a cost spike or rightsize a bill using Cost Explorer, CUR, and utilization data, then sequence Savings Plans, rightsizing, and cleanup with confidence.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
ECS Fargate Task Failure Diagnosis Prompt
Read ECS task stopped reasons, exit codes, and events to pinpoint why a Fargate task won't start, keeps restarting, or fails its health checks.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
EKS IRSA and Networking Troubleshooting Prompt
Diagnose why EKS pods cannot assume IAM roles, pull images, get IPs, or reach AWS APIs by tracing IRSA, the VPC CNI, and the OIDC trust chain.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
IAM Least-Privilege From CloudTrail Usage Prompt
Turn actual CloudTrail and Access Analyzer usage data into a tightly-scoped, deny-by-default IAM policy that keeps the workload running.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Lambda Cold-Start and Timeout Debug Prompt
Diagnose Lambda cold starts, init-phase latency, and timeouts using duration metrics and init logs, then propose targeted memory, packaging, and concurrency fixes.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
RDS Aurora Slow Query and Parameter Tuning Prompt
Use Performance Insights, slow-query logs, and EXPLAIN output to find the dominant wait and propose index, query, and parameter-group changes for RDS or Aurora.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Security Group and ALB/NLB Connectivity Triage Prompt
Trace why traffic fails through a security-group chain or a load balancer by walking client to listener to target group to target-SG and reading health checks.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
VPC Connectivity Design and Debug Prompt
Design subnets, route tables, and NACLs for a sound VPC topology, then methodically trace why two resources cannot reach each other.
- Claude
- ChatGPT
- Cursor
Open prompt
Guides
- · 9 min read
AWS Error Guide: 'The security token included in the request is expired' Credential Expiry
Fix the AWS 'security token included in the request is expired' error: refresh STS session tokens, renew assumed-role credentials, and stop ExpiredToken failures.
Read guide - · 9 min read
AWS Error Guide: 'NoSuchBucket: The specified bucket does not exist' S3 Resolution
Fix the AWS S3 NoSuchBucket error: resolve wrong bucket names, region mismatches, deleted buckets, and endpoint confusion with read-only diagnostics.
Read guide - · 9 min read
AWS Error Guide: 'Waiter ... failed: Max attempts exceeded' ResourceNotReady Timeouts
Fix the AWS 'Waiter failed: Max attempts exceeded' ResourceNotReady error: diagnose stuck CloudFormation, EKS, and EC2 resources that never reach the desired state.
Read guide - · 7 min read
AWS Error: 'Requires capabilities : [CAPABILITY_IAM]' — Cause, Fix, and Troubleshooting Guide
Fix CloudFormation InsufficientCapabilitiesException: when to pass CAPABILITY_IAM, CAPABILITY_NAMED_IAM, or CAPABILITY_AUTO_EXPAND for IAM resources and macros.
Read guide - · 7 min read
AWS Error: 'No updates are to be performed' — Cause, Fix, and Troubleshooting Guide
Fix the CloudFormation ValidationError 'No updates are to be performed': why UpdateStack no-ops, how drift hides changes, and how to stop CI failing on it.
Read guide - · 8 min read
AWS Error: 'is in ROLLBACK_COMPLETE state and can not be updated' — Cause, Fix, and Troubleshooting Guide
Fix CloudFormation stacks stuck in ROLLBACK_COMPLETE: why a failed initial create can't be updated, how to find the failing resource, and how to recover.
Read guide - · 7 min read
AWS Error: 'ConcurrentModificationException' — Cause, Fix, and Troubleshooting Guide
Fix the AWS ConcurrentModificationException on IAM and Auto Scaling: parallel modifications to one resource, IaC races, eventual consistency, and safe retries.
Read guide - · 7 min read
AWS Error: 'is already attached to an instance' (VolumeInUse) — Cause, Fix, and Troubleshooting Guide
Fix the EBS VolumeInUse error 'vol-... is already attached to an instance': detaching cleanly, stuck detachments, Multi-Attach, and device-name conflicts.
Read guide - · 8 min read
AWS Error: 'unable to place a task because no container instance met all of its requirements' — Cause, Fix, and Troubleshooting Guide
Fix ECS 'unable to place a task because no container instance met all of its requirements': insufficient CPU/memory, port conflicts, and placement constraints.
Read guide - · 9 min read
AWS Error: EKS worker nodes stuck in 'NotReady' — Cause, Fix, and Troubleshooting Guide
Fix EKS nodes stuck NotReady: broken aws-node CNI, missing node IAM policies, security-group gaps to the control plane, and subnet IP exhaustion.
Read guide - · 9 min read
AWS Error: 'You must be logged in to the server (Unauthorized)' — Cause, Fix, and Troubleshooting Guide
Fix the EKS 'You must be logged in to the server (Unauthorized)' kubectl error: IAM identity not mapped, missing access entry, wrong role, or stale kubeconfig.
Read guide - · 7 min read
AWS Error: 'The security group does not exist in VPC' (InvalidGroup.NotFound) — Cause, Fix, and Troubleshooting Guide
Fix EC2 InvalidGroup.NotFound 'security group sg-... does not exist in VPC': wrong VPC, deleted/recreated SG, stale launch template, or wrong region.
Read guide - · 6 min read
AWS Error: 'The subnet ID does not exist' (InvalidSubnetID.NotFound) — Cause, Fix, and Troubleshooting Guide
Fix EC2 InvalidSubnetID.NotFound 'subnet-... does not exist': deleted subnet, wrong region or account, stale Terraform state, or a typo'd subnet ID.
Read guide - · 8 min read
AWS Error: 'ProvisionedThroughputExceededException' on Kinesis — Cause, Fix, and Troubleshooting Guide
Fix Kinesis ProvisionedThroughputExceededException 'Rate exceeded for shard': per-shard write/read limits, hot partition keys, and too few shards.
Read guide - · 7 min read
AWS Error: 'ResourceConflictException ... An update is in progress' (Lambda) — Cause, Fix, and Troubleshooting Guide
Fix Lambda ResourceConflictException 'The operation cannot be performed at this time. An update is in progress': concurrent deploys, propagation, and waiters.
Read guide - · 8 min read
AWS Error: 'TooManyRequestsException: Rate Exceeded' (Lambda) — Cause, Fix, and Troubleshooting Guide
Fix Lambda TooManyRequestsException 'Rate Exceeded' throttling: account concurrency limits, reserved concurrency, burst limits, and downstream backpressure.
Read guide - · 7 min read
AWS Error: 'OptInRequired: You are not subscribed to this service' — Cause, Fix, and Troubleshooting Guide
Fix the AWS OptInRequired 'You are not subscribed to this service' error: disabled opt-in regions, unsubscribed Marketplace AMIs, and unactivated accounts.
Read guide - · 8 min read
AWS Error: '403 when calling the HeadObject operation: Forbidden' — Cause, Fix, and Troubleshooting Guide
Fix the S3 '(403) when calling the HeadObject operation: Forbidden' from aws s3 cp/sync: missing GetObject, KMS decrypt, or a bucket-policy deny.
Read guide - · 8 min read
AWS Error: 'The bucket you are attempting to access must be addressed using the specified endpoint' — Cause, Fix, and Troubleshooting Guide
Fix the S3 PermanentRedirect 'must be addressed using the specified endpoint' error: bucket/region mismatch, wrong AWS_REGION, and cross-region client config.
Read guide - · 8 min read
AWS Error: 'is not authorized to perform: sts:AssumeRole' — Cause, Fix, and Troubleshooting Guide
Fix the STS AccessDenied 'is not authorized to perform: sts:AssumeRole' error: trust policy principals, missing identity permissions, external IDs, and MFA.
Read guide - · 8 min read
AWS Error Guide: 'AddressLimitExceeded' — Reclaim and Raise the Elastic IP Quota
Fix EC2 AddressLimitExceeded: release unused Elastic IPs, reclaim leaked EIPs, raise the per-region quota, and cut idle Elastic IP hourly cost.
Read guide - · 9 min read
AWS Error Guide: 'ResourceInitializationError: unable to pull secrets' — ECS Task Startup Failure
Fix ECS ResourceInitializationError 'unable to pull secrets or registry auth': repair execution role permissions, KMS access, and VPC endpoint egress.
Read guide - · 9 min read
AWS Error Guide: 'InsufficientFreeAddressesInSubnet' — Free or Expand Subnet IP Space
Fix InsufficientFreeAddressesInSubnet in AWS: reclaim leaked ENIs, right-size crowded subnets, and spread across AZs when private IP addresses run out.
Read guide - · 8 min read
AWS Error Guide: 'DeleteConflict' — Detach Dependencies Before Deleting an IAM Role or User
Fix DeleteConflict in AWS IAM: detach managed policies, delete inline policies, and remove instance profiles, access keys, and MFA so a role or user deletes.
Read guide - · 8 min read
AWS Error Guide: 'EntityAlreadyExists' — Fix IAM Role, User, and Policy Name Collisions
Fix EntityAlreadyExists in AWS IAM: resolve role, user, and policy name collisions from re-runs, non-idempotent creates, and CloudFormation or Terraform drift.
Read guide - · 9 min read
AWS Error Guide: 'KMSInvalidStateException' — Fix a Disabled or Pending-Deletion KMS Key
Fix AWS KMS KMSInvalidStateException and DisabledException: re-enable disabled keys, cancel scheduled deletion, and repair failing encrypt or decrypt calls.
Read guide - · 8 min read
AWS Error Guide: 'CodeStorageExceededException' — Reclaim Lambda Code Storage Quota
Fix Lambda CodeStorageExceededException 'code storage limit exceeded': delete old function versions, prune unused functions, and request a quota increase.
Read guide - · 8 min read
AWS Error Guide: 'InvalidDBInstanceState' — Wait Out or Clear a Blocked RDS Operation
Fix RDS InvalidDBInstanceState 'not in available state': handle modifying, backing-up, and storage-optimization states and sequence changes with waiters.
Read guide - · 8 min read
AWS Error Guide: 'A conflicting conditional operation is currently in progress' — S3 Bucket Reuse
Fix S3 OperationAborted 'conflicting conditional operation in progress': handle bucket delete and recreate propagation, name reuse, and retries with backoff.
Read guide - · 9 min read
AWS Error Guide: CloudFormation 'UPDATE_ROLLBACK_FAILED' — Recover a Stuck Stack
Fix CloudFormation UPDATE_ROLLBACK_FAILED: recover a stuck stack with ContinueUpdateRollback, skip failed resources, fix manual drift, dependency and deletion errors, then re-stabilize.
Read guide - · 9 min read
AWS Error Guide: 'The security token included in the request is invalid' — Fix InvalidClientTokenId
Fix AWS InvalidClientTokenId 'security token included in the request is invalid': deleted access keys, wrong partition or account, stale profiles, deleted IAM users, and bad STS tokens.
Read guide - · 8 min read
AWS Error Guide: 'BucketAlreadyExists' and BucketAlreadyOwnedByYou — Fix S3 CreateBucket Conflicts
Fix S3 BucketAlreadyExists and BucketAlreadyOwnedByYou on CreateBucket: global name collisions, wrong-region re-creates, idempotent Terraform/CloudFormation retries, and naming strategy.
Read guide - · 9 min read
AWS Error Guide: 'DependencyViolation' — Delete Blocked by Attached Resources
Fix the AWS DependencyViolation error when deleting VPCs, subnets, security groups, and internet gateways: find the ENIs, references, and attachments still holding the resource.
Read guide - · 9 min read
AWS Error Guide: 'ProvisionedThroughputExceededException' — DynamoDB Throttling Fix
Fix DynamoDB ProvisionedThroughputExceededException: diagnose hot partitions, undersized capacity, missing backoff, and scan storms, then rebalance keys or switch capacity mode.
Read guide - · 9 min read
AWS Error Guide: 'MalformedPolicyDocument' — Invalid IAM Policy JSON Fix
Fix the AWS MalformedPolicyDocument error: diagnose invalid IAM policy JSON, bad ARNs, unknown actions, wrong principals, and unsupported conditions, then validate before applying.
Read guide - · 9 min read
AWS Error Guide: 'Rate exceeded' CloudFormation API Throttling During Deployments
Fix the AWS CloudFormation 'Rate exceeded' throttling error: reduce concurrent stack operations, add retries with backoff, and stop deployment API throttling.
Read guide - · 9 min read
AWS Error Guide: 'Health checks failed' Unhealthy ELB Target Group Targets
Fix the AWS ELB 'Health checks failed' error: diagnose unhealthy target group targets, security groups, health check paths, and ECS deregistration timeouts.
Read guide - · 9 min read
AWS Error Guide: 'InstanceLimitExceeded' EC2 On-Demand Quota Reached
Fix the AWS EC2 'InstanceLimitExceeded' error: understand On-Demand instance quotas, request Service Quotas increases, and avoid hitting account limits.
Read guide - · 9 min read
AWS Error Guide: 'Signature expired / InvalidSignatureException' Clock Skew Failures
Fix the AWS 'Signature expired' and InvalidSignatureException clock-skew errors: synchronize host time with NTP and resolve request-time drift.
Read guide - · 9 min read
AWS Error Guide: 'explicit deny in a service control policy' Organizations SCP Block
Fix the AWS 'explicit deny in a service control policy' error: identify the blocking SCP, understand org guardrails, and adjust policy attachments correctly.
Read guide - · 9 min read
AWS Error Guide: 'Unable to locate credentials' Missing Credential Chain
Fix the AWS CLI 'Unable to locate credentials' error: configure profiles, environment variables, instance roles, and the credential provider chain correctly.
Read guide - · 11 min read
Aurora Serverless v2 Scaling and Cost With AI: ACU Min, Max, and the Bill
Aurora Serverless v2 scales in fractions of a second, but the ACU floor you set quietly decides your bill. Here's how to use AI to size min/max and know when provisioned wins.
Read guide - · 11 min read
Enforcing Compliance With AWS Config Rules
Managed rules, custom Lambda and Guard rules, conformance packs, and automated remediation — drafted with AI and verified against the evaluation model that actually scores your resources.
Read guide - · 10 min read
AWS Error Guide: 'AccessDenied: User is not authorized to perform' IAM Permission Failures
Fix the AWS AccessDenied 'is not authorized to perform' error: diagnose missing IAM permissions, explicit denies, SCPs, permissions boundaries, and resource policies.
Read guide - · 10 min read
AWS Error Guide: 'CannotPullContainerError' ECS Task Image Pull Failures
Fix the ECS CannotPullContainerError: diagnose ECR auth, missing images and tags, no route to the registry, private subnet endpoints, and Docker Hub rate limits.
Read guide - · 9 min read
AWS Error Guide: 'InsufficientInstanceCapacity' EC2 Launch Capacity Failures
Fix the EC2 InsufficientInstanceCapacity error: diagnose AZ capacity shortfalls, rigid instance types, capacity reservations, placement groups, and ASG strategies.
Read guide - · 9 min read
AWS Error Guide: 'Task timed out after N seconds' Lambda Timeout Failures
Fix the Lambda 'Task timed out after N seconds' error: diagnose low timeouts, blocked network calls, cold starts, downstream latency, and unresolved async work.
Read guide - · 9 min read
AWS Error Guide: '503 SlowDown' and ServiceUnavailable S3 Request-Rate Failures
Fix S3 503 SlowDown and ServiceUnavailable errors: diagnose per-prefix request-rate limits, hot key partitions, missing retries, list storms, and bad key design.
Read guide - · 9 min read
AWS Error Guide: 'SignatureDoesNotMatch' and InvalidSignatureException Auth Failures
Fix AWS SignatureDoesNotMatch and InvalidSignatureException errors: diagnose clock skew, wrong secret keys, region/service mismatch, encoded paths, and proxies.
Read guide - · 9 min read
AWS Error Guide: 'Throttling: Rate exceeded' and RequestLimitExceeded API Throttling
Fix AWS Throttling, Rate exceeded and RequestLimitExceeded errors: diagnose API rate limits, hot retry loops, missing backoff, pagination storms, and quota caps.
Read guide - · 9 min read
AWS Error Guide: 'UnauthorizedOperation' EC2 API Permission Failures
Fix the EC2 UnauthorizedOperation error: diagnose missing ec2 permissions, condition keys, encoded authorization messages, SCPs, wrong roles, and resource scoping.
Read guide - · 9 min read
AWS Error Guide: 'VcpuLimitExceeded' and LimitExceeded Service Quota Failures
Fix AWS VcpuLimitExceeded and LimitExceeded errors: diagnose On-Demand vCPU quotas, per-family limits, regional caps, and request the right service quota increase.
Read guide - · 11 min read
AWS Organizations and SCPs With AI: Guardrails That Actually Deny
Service control policies are easy to write and easy to get wrong. Here's how to use AI to design an OU structure and deny boundaries without locking yourself out of your own accounts.
Read guide - · 11 min read
Connecting Services Privately With AWS PrivateLink and VPC Endpoints
Interface vs gateway endpoints, endpoint policies, private DNS, and cross-account PrivateLink services — drafted with AI and verified against how the traffic actually flows.
Read guide - · 11 min read
AWS WAF Rules and Rate Limiting With AI: From Managed Groups to Clean Custom Rules
Managed rule groups stop the obvious attacks but block real users in the corners. Here's how to use AI to tune WAF rate limits and custom rules without drowning in false positives.
Read guide - · 11 min read
CloudFront Caching and Performance With AI
Use AI to draft CloudFront cache behaviors, TTLs, cache keys, and origin shield config, then verify the policies yourself before they wreck your hit ratio or cache a session cookie.
Read guide - · 12 min read
Designing AWS Transit Gateway Architectures With AI
Let AI draft Transit Gateway route tables, attachments, and segmentation, then verify the propagation and association logic yourself before you accidentally route prod into a shared dev VPC.
Read guide - · 11 min read
DynamoDB Capacity and Cost Optimization
On-demand vs provisioned, auto scaling, hot partitions, TTL, and the cost levers that actually move the bill — drafted with AI and verified against your real access patterns.
Read guide - · 11 min read
Spot Instances and Auto Scaling With AI
Use AI to draft a mixed instances policy with capacity-optimized allocation and interruption handling, then verify the diversification and drain logic yourself before Spot reclaims your fleet mid-deploy.
Read guide - · 12 min read
Running an AI-Assisted AWS Well-Architected Review
Well-Architected reviews stall because nobody has time. Here's how to use AI to draft findings against the six pillars while you keep judgment and prioritization.
Read guide - · 11 min read
AWS Cost Optimization With AI: Rightsizing and Savings Plans
The AWS bill grows quietly until someone notices. Here's how to use AI to read Cost Explorer and CUR data, then rightsize and commit without overcommitting.
Read guide - · 10 min read
Cutting Lambda Cold Starts and Cost With AI
Lambda cold starts and bills creep up quietly. Here's how to use AI to read traces and cost data, then cut latency and spend without guessing at memory sizes.
Read guide - · 11 min read
Debugging VPC Connectivity With AI: Routes, NACLs, and Security Groups
Connection timed out, no logs, no clues. Here's how to use AI to reason through VPC routing, NACLs, and security groups so you find the broken layer fast.
Read guide - · 11 min read
Diagnosing ECS and Fargate Task Failures With AI
Fargate tasks die with cryptic stopped reasons and no SSH. Here's how to use AI to decode stopped reasons, exit codes, and task definitions to find the real cause.
Read guide - · 12 min read
Troubleshooting EKS With AI: IRSA, Networking, and Scheduling
EKS failures span Kubernetes and AWS at once. Here's how to use AI to triage IRSA, CNI networking, and pod scheduling problems without guessing across layers.
Read guide - · 11 min read
Tuning RDS and Aurora Performance With AI
Slow queries and mystery CPU spikes on RDS waste hours. Here's how to use AI to read Performance Insights and EXPLAIN plans, then tune without flying blind.
Read guide - · 10 min read
Writing CloudWatch Logs Insights Queries With AI
The Logs Insights query language is easy to forget under pressure. Here's how to use AI to draft, refine, and verify queries fast during a live incident.
Read guide - · 11 min read
Writing Least-Privilege IAM Policies With AI From CloudTrail
Stop shipping iam:* wildcards. Here's how to use CloudTrail and AI to draft least-privilege IAM policies grounded in the calls a role actually makes.
Read guide