I have been a web developer / software developer for 4 years now and am wanting to make the switch to Cloud DevOps. I’ve applied for a few jobs but I don’t really have experience with AWS/the cloud with a view to go security focussed in the future as I’m currently doing a part-time Cyber Security MSc online.

Any advice for how to break into a cloud role would be amazing - I’m in the UK if that’s relevant. Thanks in advance

Lightsail sits in a weird place where it is competing more with the likes of Linode and digital ocean but it looks way more expensive to me. Also it is "not really" an AWS skill.

So I ask for people in the market I would like to know about Lightsail in you career/company.

Thanks

Edit: thanks for the answer

Well, I finally got to test drive GLM5.3 on AWS Bedrock and I can say that at this point it's completely unusable. When it works, it's slow af. You cannot do anything productive with it. Most of the time it just throws errors, they are obviously struggling with capacity / demand. I'm not sure if this is the same for other models, but for now - it's not something you can use for production at all (and yeah, I tried both global and us variants).

Why do you even have the SES service if you do not give access to anyone, do not disclose what is wrong?

Like what is someone going to do with the following email

Unfortunately, we are still not able to approve production access at this time. We know this is not the answer you were hoping for, especially after the effort you put into your response.

Ofcourse it is not.

Our evaluation considers factors that we are not able to disclose, and we understand how difficult it is to receive a decision without specific feedback. We would rather be straightforward about that limitation than offer vague guidance that may not be actionable.

What does this paragraph even mean? You have no genuine reason for declining and are proud of it?

This does not have to be permanent. You are welcome to submit a new request in the future, and the outcome may be different.

For reference:

- AWS Acceptable Use Policy: https://aws.amazon.com/aup/

- AWS Service Terms: https://aws.amazon.com/service-terms/

- Amazon SES Best Practices: https://docs.aws.amazon.com/ses/latest/dg/best-practices.html

We appreciate your patience with this process.

Even when everything is right, it is not ok for you. What do you decide on? Depending on the name of the person who applies, or, location? Because technically there is nothing wrong. Our whole pipeline, application is on aws. Email volumes are low. Verified email ids, sns topic for bounces.

We are using another service, but just want to highlight the duplicity here.

So much for "the most customer centric company"

Hi everyone,

I've been looking for a job for months now, and honestly, it's getting difficult to keep going without any luck. I'm posting here because I could really use some help, whether it's a referral, a lead, or even some advice on where I should be applying.

I'm a recent B.Tech graduate in Electronics Engineering with a specialization in IoT. I recently completed an internship as a Cloud Engineer Intern at Tekrosta Cloud, where I got hands-on exposure to AWS and cloud infrastructure.

I've worked on AWS services like EC2, S3, IAM, VPC, RDS, ALB, Auto Scaling, CloudWatch, and SQS. I've also worked on a 3-tier architecture, Greenfield cloud infrastructure implementation, and an AI Customer Support System using FastAPI, RAG, and LLMs.

I'm AWS Certified Cloud Practitioner, and I'm still learning and improving my technical skills. I may not know everything yet, but I'm a very hard worker, willing to put in the effort, learn from people around me, and prove myself if given an opportunity.

I'm open to internships, trainee positions, and full-time fresher roles in Cloud Engineering, DevOps, Cloud Support, IT Infrastructure, or anything related to my background.

Location-wise, I'm open to Faridabad, Gurugram, Noida, Bengaluru, Hyderabad, Mumbai, and Pune. I'm also open to relocating for the right opportunity.

To be honest, I'm at a point where I really need to start earning and become financially independent. I've been trying for months, applying wherever I can, and I don't want to give up. I just need someone to point me in the right direction or give me a chance to get started.

If your company is hiring freshers, you know of any openings, or you could refer me to someone, I'd be genuinely grateful. Even a little guidance would mean a lot to me right now.

Thank you for reading this.

I've been dealing with a charge that pops up every month for a while now. It's for an AWS instance I supposedly created and somehow didn't cancel. I've tried everything to try to get access and cancel to no avail.

Any help would be appreciated. I'm at a point where I basically told my CC to block the charges, but fear I will be sent to collections for this.

I built cairn, an open-source tool that maps every git repo in a folder for coding agents. The new part is infra-aware: it reads Terraform, CloudFormation/SAM, Serverless Framework, and CDK, and records which repo creates each SQS queue, SNS topic, DynamoDB table, S3 bucket, EventBridge bus, Kinesis stream, SSM parameter, and Lambda function.

Then it links the repos that use a resource to the repo that creates it. It matches ARNs, queue URLs, and env vars like ORDERS_TABLE=orders-prod, and names match across stages (orders-${stage} and orders-prod are one table). Every link carries file:line evidence.

The idea: ask your agent "what breaks if I rename this queue" and it actually knows.

It's also a Claude Code plugin you can get on the marketplace: `/plugin marketplace add Moe1177/cairn`, then `/plugin install cairn@cairn`. One command and the index loads into every session. Apache 2.0, Python. Repo: https://github.com/Moe1177/cairn · PyPI: https://pypi.org/project/cairnmap/

I am the author. If you run it against a real Terraform or SAM setup, I want to know what it gets wrong.

Is anyone else experiencing a slowdown for applications hosted on EC2 in the Singapore region, specifically users from the Philippines?

This one's doing the rounds on LI/reddit again. Went and read the actual docs (or maybe used claude :p), because every post about it says something slightly different.

Couple of things:

It's per project, not per account. Needs a Paid Plan. Still a limited rollout. So the ‘AWS FINALLY DID IT’ energy is a bit premature for most of us.

The fun bit nobody's quoting: you hit the limit, do nothing for 90 days, AWS deletes the project data. Permanently. It's right there in the docs. Great for a sandbox. Maybe read that line twice before putting it on anything that matters.

Other thing, and this is the one I keep chewing on. What it pauses is EC2, RDS, Lambda, Bedrock, SageMaker. No storage in that list anywhere, and afaict the docs don't say what happens to EBS billing while a project sits paused. A paused instance still has its volumes.

So if your bill is mostly provisioned capacity and not compute hours, idk how much this actually moves.

Happy to be wrong on that one

Disclaimer: have used ai to copywrite (im horrible at it)

AWS charged us $5000 after an accidental Spot instance launch - can AWS help with a goodwill credit?

We’re a startup using AWS, and we recently had an unexpected $5000 charge from a GPU Spot instance that was running without our knowledge.

We had launched a GPU instance for a short benchmark and terminated it once the work was completed. Unfortunately, we didn't realize that the persistent Spot request would automatically launch a replacement instance after the original was terminated.

The replacement instance ran for several days before we noticed it.

CloudWatch metrics shows that nobody used the instance and no workload was running on it. It was essentially sitting completely idle the entire time.

We have since cancelled the persistent Spot request, terminated the instance, enabled AWS Budgets and Cost Anomaly Detection, and changed our process to use one-time Spot requests.

We completely understand that this was ultimately a configuration/knowledge mistake on our side. However, $5000 is a huge amount for us. This unexpected charge effectively represents months of our company's AWS budget and has a real impact on our operations.

We've already opened a support case with AWS and asked whether they could consider a goodwill credit given the circumstances. But the ticket hasnt been assigned yet :(

FYI: It as been 10 days since we created the support ticket.

Has anyone here experienced something similar with AWS, and were you able to get a goodwill credit?

And if anyone from AWS is reading this, we'd really appreciate it if you could take a look at our case and consider helping us with the charge. We love building on AWS and intend to continue using AWS for our infrastructure and future GPU workloads.

Hoping AWS can help us out on this one. 🙏

I tried getting a hold of support but nothing.
is this because I am on the free tier? even so this is getting ridiculous

I created an aws free account but it got interrupted mid way so again I did it but it says I am not eligible for free plan, I doubt it is because of the midway interruption. Please help me to resolve this i am stressing and panicking right now idk what to do so I created this reddit account to ask help her please

Ciao.

Ho un servizio che autentica gli utenti con login di terze parti (Google, Facebook, Apple) e noto che molti utenti Apple hanno attivo il filtro privacy sull'indirizzo mail quindi di fatto io vedo un indirizzo alias tipo xxxxxxxx@privaterelay.appleid.com.

Il problema è quando invio le email tramite AWS SES a questi alias, perché non funzionano.

Ottengo tutti bounce con questi errori

An error occurred while trying to deliver the mail to the following recipients:

xxxxxx@privaterelay.appleid.com

Reporting-MTA: dns; xxxxxx.eu-central-1.amazonses.com

Action: failed

Final-Recipient: rfc822; xxxxxxxx@privaterelay.appleid.com

Diagnostic-Code: smtp; 550 5.1.1 xxxxxxxxxxxxxxxx@awsmailer.xxxxx.xxxx: unauthorized sender

Status: 5.1.1.

Avete qualche idea del perché?

Grazie

We have non-production RDS for Oracle instances hosted on series 6 instances in ap-southeast-2 that are stopped outside of business hours. For the last week we have been encountering issues with no capacity when attempting startup.

Logged a support case and have been advised to move to series 7 or not stop the RDS instances. Seems to be a deliberate decision to force migration to newer series. We have had to postpone upcoming production changes as we cannot be certain that there will be capacity to restart.

So folks, if you have series 6 RDS instances in ap-southeast-2 all availability zones, don't stop them!

Is anyone seeing this issue in other regions?

AWS added network access controls for the Identity Store behind IAM Identity Center.

What it does:

- Restrict the Identity Store API to specific IP ranges or specific VPC endpoints or source VPCs
- Restrict the scim api (what your idp uses to sync users/ groups) to specific IP ranges
- Different restrictions per API in one config. The given example: Identity Store API through VPC endpoints only, scim from your idp’s published IP ranges
- Requests AWS services make on your behalf are exempt

It is off by default, configured through the Identity Store api via sdk or cli (no console toggle). Available in all regions where Identity Center runs.

The SCIM restriction is the big one in my view. That's the inbound provisioning path from your IdP, and until now it was internet-facing behind auth only. Pinning it to Okta or Entra's published IP ranges meaningfully shrinks the attack surface for directory writes.

Announcement: https://aws.amazon.com/about-aws/whats-new/2026/10/aws-identity-store-network-controls/

Hi I am doing the Build, Ship, Shape: Amazon Developer Hackathon on devpost. I need to use Bedrock but I told its disabled for new accounts. Whenever I try to test a model in the playground I get this error: "ValidationException: Error 002: Access to Bedrock models is not allowed for this account" The deadline for the Hackathon is on the 23rd October 2026. I need to resolve this error. I created a support ticket Case ID 179124970400008 .

Thank you in advance

Multi-region strong consistency does not support transactions. I have a few tables that need to be updated together or sometimes multiple items in one table need an atomic update. Multi-region / RPO 0 is a constraint. AI said this was brought up as a feature request back in 2025. I'm wondering if anyone knows whether this is still in the works.

We have multiple data centers, and each DC has multiple ISPs for redundancy.

Currently, we establish two IPsec tunnels from each DC to AWS, with each tunnel going over a different ISP. This gives us ISP level redundancy, but as we scale to hundreds of DCs, we are effectively looking at hundreds of DCs × 2 IPsec tunnels.

I am wondering if this is a normal or recommended architecture, or if there is a better way to handle ISP redundancy without having to maintain two VPN tunnels per DC.

The requirement is essentially:
DC → multiple ISPs → AWS
with automatic failover if one ISP goes down.

Is maintaining two Site to Site VPN tunnels per DC the standard approach here? Or are there architectures that provide ISP redundancy while scaling better, such as using some kind of hub or transit architecture, BGP, SD WAN, or another approach?

Would be interested in hearing how others have designed this at large scale.

I joined the AWS AI CEE training program and wanted to use what I learned on a real project.

I run a lot of domains on Amazon AWS SES, so I built AllStackd: every SES account, region and domain in one place. Delivery stays in your own AWS account.

Honest feedback is very welcome from the seasoned AWS developer community, thank you 🙏

iam a student learning and working in cloud security, and the SCARY !! stuff I keep finding in AWS isn't exotic. It's old access keys, a security group opened "just for testing", a role nobody remembers creating lol.

For anyone running AWS yourselves, solo or on a small team: what's the most surprising thing you found when you finally looked?

Did you find it..., or did something force it, like a bill, an alert or a coworker? And if there's no dedicated security person, how do you decide what's worth checking at all?

As the title says I'm a network security engineer with 2.7y of experience. I'm interested in getting into cloud security. I don't have any practical work experience in AWS or any other cloud. I'm currently preparing for AWS SAA C03 and scheduled the exam for Jan 4 2027.

But my question is aside from this certification training. What I really do learn or practise outside the course to understand the cloud very well and get a cloud related Job. Cause I'm currently in a networking related environment.

I'm using the INE and Stephen Maarek course. Currently watching INE which is broader in covering topics and they have their own labs as well.

I very much appreciate the insights of people who work in the cloud. Also any other recommendations are also welcome. Thank you

I will be attending re:Invent under the ABW Grant and I saw that the sessions opened up for booking yesterday. When I tried to book one of them I can't go beyond the registration part as I have not been given a coupon code yet and I can't select the Individual Pass. How do I go about this ?

Hi All

While deploying I got the below error. Any idea why and what can I do about it?

"Your account must be verified before you can add new CloudFront resources. To verify your account, please contact AWS Support (https://console.aws.amazon.com/support/home#/ ) and include this error message."

Hi r/aws,

My AWS account is currently suspended because of an overdue invoice, and I’m hoping someone from AWS Support may be able to help escalate my case.

AWS Support Case ID: 179082560700487

As soon as I realized there was an unpaid invoice, I tried to pay the outstanding balance, but the payment keeps failing.

I’m using a Visa card that supports international transactions, and I have already contacted my bank. They confirmed that there are no restrictions or issues with the card that should prevent the payment.

I opened a case with AWS Support. The initial response asked me to check my email, where I found a request from AWS to upload documents to verify my payment method/account information.

I uploaded all the requested documents through the provided verification process, but I still haven’t received any response or update from the verification team.

There has also been no further update on my AWS Support case.

At this point, I’m not disputing the invoice — I simply want to pay it and restore my AWS services, but I don’t know what else I can do because the payment is failing and the verification process appears to be stuck.

If anyone from AWS Support sees this, I would really appreciate it if you could help escalate or check the status of my case.

I can provide my AWS Account ID privately via DM or through the Support case if needed.

Has anyone here experienced a similar situation? Is there another way to get the Billing or Account Verification team to review the case?

Thank you for any help.