r/aws

All the AWS best practices in one Claude Code / Codex skill, so your agent doesn't rely on stale memory or crawl docs every time
▲ 10 r/aws+1 crossposts

All the AWS best practices in one Claude Code / Codex skill, so your agent doesn't rely on stale memory or crawl docs every time

~30.5M tokens, ~481 workflow agents, 217 best-practice files, and official AWS source links throughout: that's what went into building and verifying this skill.

Open-source Claude Code + OpenAI Codex plugin: a consolidated collection of AWS best practices for 208 AWS services plus 9 cross-service topics, organized by use case and Well-Architected pillar.

The point: when you ask an agent "how should I secure this S3 bucket?", "is this Lambda production-ready?", or "what are the cost/reliability best practices for DynamoDB?", the agent usually answers from stale model memory or burns time and tokens crawling AWS docs live. This repo gives it a routed, source-linked local corpus instead: the agent opens the relevant services/<category>/<service>.md file and answers from official AWS guidance.

Each service file is intentionally narrow:

  • best practices only
  • no pricing tables
  • no service intros
  • no tutorials
  • no long code walkthroughs
  • every practice links to an official AWS source

The maintenance loop is also documented: GENERATE.md creates missing service files from official AWS docs, REFRESH.md checks for new/renamed/retired AWS services and stale content, and scripts/check.py validates coverage, structure, freshness, and links.

Repo: https://github.com/ferdinandobons/AWSBestPracticesSkill

u/Ambitious-Pie-7827 — 2 hours ago
▲ 14 r/aws

Anyone else seeing Karpenter / EC2 API rate limits (503 RequestLimitExceeded) in us-east-1?

For the past 2 hours, our Karpenter setup hasn't been able to create new nodes in us-east-1.

We are consistently hitting AWS API rate limits and getting 503 errors. Other regions are working perfectly as intended. Is anyone else hitting this right now, or did AWS change something under the hood?

The errors we're seeing:

launching nodeclaim, creating instance, creating nodeclaim, getting launch template configs, getting launch templates, describing launch templates, operation error EC2: DescribeLaunchTemplates, https response error StatusCode: 503, RequestID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, api error RequestLimitExceeded: Request limit exceeded.

failed to get rate limit token, retry quota exceeded, 1 available, 5 requested

edit: they just updated their service health page:

Increased Launch Template API Error Rates
Jul 06 5:45 AM PDT We are investigating increased error rates when calling EC2 Launch Template APIs in US-EAST-1 Region. During this time, affected customers may experience errors when creating, modifying, or referencing launch templates. Other AWS services that rely on launch templates may also be impacted. We will provide another update by 6:30 AM PDT or sooner, if we have additional information to share.
reddit.com
u/shalevbs — 5 hours ago
▲ 4 r/aws

Aurora MySQL RDS-initiated failover : How can I identify the actual root cause?

Hello,

We had an unexpected RDS-initiated failover on an Aurora MySQL production cluster and I’m trying to understand the actual root cause.

Aurora Setup:

Engine: Aurora MySQL
Region: us-east-1
Cluster: 2 instances
Instance class: db.r5.large
Topology: 1 writer + 1 reader in different AZs

Event timeline:

07:04 IST - Started cross-AZ failover to reader instance
07:04 IST - DB instance shutdown
07:04 IST - DB instance restarted
07:04 IST - Completed RDS initiated failover to reader instance

07:07 IST - Recovery of the previous writer DB instance started
07:12 IST - Previous writer DB instance restarted
07:13 IST - Recovery of the DB instance completed

07:22 IST - Customer initiated failover back to original writer instance
07:22 IST - Completed customer initiated failover

The part I’m trying to investigate is the original RDS-initiated failover at 07:04 IST.

I checked CloudWatch metrics around that time and nothing obvious stands out:

FreeableMemory: healthy, several GB free
CPUUtilization: spikes, but not sustained saturation; max around 65%
DatabaseConnections: very low, max around 11
AbortedClients: small spikes only
DiskQueueDepth: mostly 0, max around 1
WriteLatency: mostly around 1 ms, small spike around 3 ms
VolumeWriteIOPs: stable

So far, this does not look like CPU exhaustion, memory pressure, connection exhaustion, disk queue pressure, or storage latency. I have already checked the RDS events at Cluster and instance level.

Can anyone help me debug the issue? Would appreciate any suggestions from people who have debugged similar Aurora failovers. Thank you !!

Note : We are on Basic Support Plan so cannot create technical case from AWS account that's why I'm posting the question in this sub.

reddit.com
u/HouseOfCoder — 5 hours ago
▲ 3 r/aws

Tool for finding dangling resources

We're a relatively small shop and for <reasons>, we don't have Terraform or IaC. All the operations are done using console interface. I have a couple of EC2 instances, public IPs, RDS instances, volumes, etc. Now, I need to remove some capacity from EC2 and I'm wondering how I can pinpoint its volume and related resources so that I can safely clean it. There are EC2 instances connected to RDS and I want to delete their security groups as well.

I can manually search and destroy using console but I want to double check it. Which tools are you using for this purpose? I want it to print out (not automatically delete) the resources and I want to delete them manually (by double checking it).

Thanks.

reddit.com
u/IdleBreakpoint — 6 hours ago
▲ 0 r/aws

Can someone explain EC2 private instances?

I am learning AWS.
I created an ec2 private instance, private subnet uses NAT, pubic instance uses IG. I can connect to the instance with SSM manager but I cannot ssh into it. I have sg groups that allow ssh.

The problem is I don’t fully understand this concept of private instances and the AWS docs don’t explain them.

I want to be able to ssh into the private instance without using private connection link or public ip, or SSM.

What would I need to configure?
Can the ssh connection to private ec2 be configured without ALB or NLB?

Thanks.

Edit:
Thank you all the responses and the time spared. It really helped me understand private subnets and ec2 instances better.

reddit.com
u/SeeTheUntruth_Ad7178 — 24 hours ago
▲ 0 r/aws

Can I re-create a new free aws account and try it free half a year again?

Facts:

  • have a free AWS account long time ago.
  • it is inactive for a long time (>= 3 years)
  • aws sends email to me that this account will be frozen if no activity in a week.

Questions:

  • Can I re-create a new free aws account and try AWS free half a year again?
  • If yes, can I re-use the same credit card and personal information as my previous free aws account?

Thanks!

reddit.com
u/fly_fish_1 — 20 hours ago
▲ 5 r/aws+5 crossposts

New Book - Using WordPress on AWS Lightsail

Sample Chapter - Desktop Docker

For Local Docker Development. We could use Docker Engine, which is the primary container runtime that runs directly on Linux and Windows servers. It is built for production use because it is lightweight, stable, and can be automated with command-line tools, system services, and CI/CD pipelines. This setup provides the performance and control necessary to run applications at scale. On the other hand, Docker Desktop is meant for development on macOS, Windows, and Linux desktops. It includes Docker Engine inside a small virtual machine and adds a graphical dashboard, resource controls, Docker Compose, and optional Kubernetes for local testing. In short, Docker Engine runs containers in production, while Docker Desktop provides the developer with an easy way to build, test, and debug containers locally before deploying them to production.

We will install Docker Desktop for our development work on either Windows, Linux, or macOS.

https://adamjohnston.me/sample-chapter-desktop-docker/

u/acj1971 — 1 day ago
▲ 10 r/aws

When do we think Cloudfront will support the new HTTP QUERY method?

I'm sure no one here has an "accurate" answer here, but I'm curious if anyone has any past experience seeing how long it takes AWS to adopt new standards like RFC 10008.

reddit.com
u/RyanF9802 — 1 day ago
▲ 7 r/aws

Surprise charge of $564 after months of $0 usage

Hello,

I am currently panicking because I was hit with a very random charge of 564USD after months of 0USD usage:

Service EC2-Other($) Total costs($) EC2-Other(GB-Month) Total usage(GB-Month)
Service total 0.65885612 0.65885612 8.2357010789 8.2357010789
2026-01-01 0.6400000344 0.6400000344 8.0000000208 8.0000000208
2026-02-01 0.0188560856 0.0188560856 0.2357010581 0.2357010581
2026-03-01 0 0
2026-04-01 0 0
2026-05-01 0 0
2026-06-01 0 0

I have absolute no idea where the charge has come from (charged to my card), and it still has not showed up yet in bills. I opened up multiple cases with still no response for 3 days now. I tried checking everywhere as to what could be causing this and I have found absolutely nothing. I am dumbfounded with no idea.

Help would be appreciated,

reddit.com
u/CapitalUniversity2 — 1 day ago
▲ 0 r/aws

Anyone else have issues recently connecting your AWS account when applying for startup credits?

For me, when I click link this account, it just opens up the startup game in AWS and doesn’t link them.

reddit.com
▲ 0 r/aws+1 crossposts

Need feedback for EC2 project

A Uni student and built a free tool that finds the cheapest AWS EC2 Spot instances with ML price predictions and generates ready-to-apply Terraform configs.

No account setup needed. Would love brutal honest feedback from people who actually use Spot and AWS cloud services here is the link in case the attached one doesn’t work.

cloud-9opt.com

cloud-9opt.com
u/Kind-Mathematician29 — 2 days ago
▲ 1 r/aws

AWS Activate credits not applied after AWS Organizations billing change — has anyone resolved this?

We’re a startup using AWS Activate credits through a partner startup program. The credits are active, valid, and have a large remaining balance, but they were not applied to our recent AWS invoice.

AWS Support confirmed that the issue was not because the credits expired, were exhausted, or were invalid. They said the credits were missed because our AWS account changed AWS Organizations billing-family membership during the billing month, which caused the billing period to split. Because of that, the credit was apparently not picked up during invoice generation.

The frustrating part is that there was no clear email warning, console alert, billing-risk notification, or confirmation message telling us that this organization/billing change could prevent active credits from applying to the invoice. From our side, the credit looked active and available, so we had no reason to expect a full invoice without credits applied.

AWS is saying they cannot retroactively rerun the old billing period and suggested contacting the startup program partner for possible authorization of an adjustment.

Has anyone here faced a similar AWS Activate / AWS Organizations billing-family issue? Were you able to get AWS to issue a credit memo, service credit, or invoice adjustment? Any advice on the right escalation path would be appreciated.

Update - Issue Resolved, bill got waived off. Thanks to the Team.

reddit.com
u/Savings-Fun4226 — 2 days ago
▲ 11 r/aws

SageMaker Ground Truth - End of Support

https://aws.amazon.com/about-aws/whats-new/2026/06/aws-service-availability/

https://docs.aws.amazon.com/sagemaker/latest/dg/sms-task-types.html

> After careful consideration, we have made the decision to close new customer access to AWS Ground Truth, effective 7/30/26. Existing customers can continue to use the service as normal. AWS continues to invest in security and availability improvements for Ground Truth, but we do not plan to introduce new features.

Kind of surprised by this. Tbh, I thought AWS was offering this human workforce service as a way to train their Rekognition system and benefit AWS customers at the same time. Or maybe they have enough training data now?

reddit.com
u/MaximumPepper123 — 2 days ago
▲ 0 r/aws

Looking for feedback from people who manage AWS bills every month

What would you pay for an AWS cost optimization platform?

Hey everyone,

I wanted to get some honest opinions from people who actually manage AWS every day.

I spent a few years in AWS ProServe, and one thing that came up with almost every customer was cost. It didn't seem to matter whether they were a startup or a large enterprise or a federal client. Everyone felt like they were constantly chasing their AWS bill instead of staying ahead of it.

I'm at a small MSP now, and over the last year or so I built an internal tool for our team. It started because I got tired of jumping between Cost Explorer, CUR reports, Trusted Advisor, spreadsheets, and a handful of scripts just to answer simple questions and the existing tools fell short.

Over time it evolved into something we now use across all of our customer accounts. Besides cost optimization, it surfaces cost events, provides much more granular visibility into spend, and includes recommendations.

The funny part is I originally planned to release it as open source. That was always the goal.

Then one of our customers saw it, asked if they could buy it, and convinced my boss we should consider turning it into a SaaS instead.

So now we're at a crossroads, and I'd love some honest feedback from this community.

What would you pay?

For a platform with:

  • Unlimited AWS accounts
  • Multi-account support
  • Granular cost breakdowns
  • Cost events and anomaly tracking
  • Well-Architected recommendations
  • No account or resource limits

If this genuinely helped you reduce AWS spend and saved you hours each month, what would you realistically pay?

We're currently thinking somewhere in the $19.99 to $199.99/month range, but I'm intentionally not narrowing it further because I'd rather hear what you think it's actually worth.

Would you pay a monthly subscription? A one-time license? Or would you expect something like this to be open source?

I'm genuinely not trying to sell anything here. We're still deciding whether this should become a product at all, and I'd rather hear from people who manage AWS every day than make assumptions.

Appreciate any feedback, even if your answer is, "nothing."

reddit.com
u/Embarrassed-Ebb-1970 — 3 days ago
▲ 0 r/aws

Bedrock question

Hey guys,

I wanted to know if rpm / bedrock enabling is directly available on the account by default or doe it have a whole process ??

I did see few people who were able to get rpm for claude enabled on gmail based account .

If someone could clarify would be of a great help.

reddit.com
u/rohan_3106 — 3 days ago
▲ 35 r/aws+1 crossposts

AWS bedrock roadblocks are infuriating

I’ve been working with AWS professionally for a decade. I’ve had AWS accounts for other side projects, but decided to create a new one for an ai specific project where I wanted to test and learn bedrock. I created this account at the beginning of June, but kept getting hit with validation errors when trying to test out a model in playground.

I open a support ticket and after weeks of no response, I’m told my account is too new. I need to wait a full billing cycle and show account activity before they enable the models.

Ok fine. I spent the rest of June building but continue to hit new account road blocks. Now it’s July, I reach back out to support after having completed my first billing cycle and I’m still denied again without any explanation other than “To maintain performance of the service and to make sure we use bedrock appropriately, model access for a given account might depend on factors like payment history and account usage. We can’t approve your request”

What the actual f? I’ve never dealt with a more frustrating user experience. I’m certain if I went to azure of gcp i wouldn’t have this issue and they gladly let me spend thousands of dollars on usage. AwS is spending a billion dollars on deployment engineers to go into companies and show them how to use AI, but god forbid I try to do it myself and spend my own money on the platform.

What a joke.

EDIT: I must’ve made someone mad because they auto closed my support case without any response :,)

reddit.com
u/MichigansPinkyFinger — 4 days ago
▲ 7 r/aws

SES complaint rate

I run a small SaaS that sends 2,000 - 5,000 emails via SES per day. Things have been going fine for the last 12+ months, no major issues with SES.

Then in the last week, a scammer found my service and used it to spam emails, specifically `gmx.de` emails for some reason. Caught them and fixed and built in some safeguards. But now I'm getting a lot of email abuse complaints, which is causing my historic complaint rate to go up.

I'm now worried that AWS will pause my account/stop sending emails through SES. I'll probably quickly find another email provider as a backup.

But is there anything I should do? Should I proactively reach out to AWS support to give them a heads up? I really don't want to be cut off as SES is working very well for my use case.

https://preview.redd.it/ryqi4gi98wah1.png?width=1148&format=png&auto=webp&s=ff5e3aba2d47128f598becd8314615f11f55a9fd

reddit.com
u/cowgod2007 — 4 days ago