Operational Excellence, Security & Sustainability
Pillars 4, 5, & 6: The 4 Golden Signals, canary rollouts with automated alarms, IAM least privilege, KMS Envelope Encryption, and Graviton3 carbon efficiency.
Source: AWS Well-Architected Tool:
- Operational Excellence: OPS 1 – OPS 11 (11 Questions)
- Security: SEC 1 – SEC 11 (11 Questions)
- Sustainability: SUS 1 – SUS 6 (6 Questions)
Core Concept: Ensuring systems are observable, safe to deploy, strictly protected at every layer, and environmentally efficient.
1. Operational Excellence (OPS 1 – OPS 11)
| ID | Question | Architectural Focus for Interviews |
|---|---|---|
| OPS 1 | How do you determine what your priorities are? | Aligning system SLOs/SLAs with business requirements (e.g., checkout availability vs non-critical recommendation engine). |
| OPS 2 | How do you structure your organization to support your business outcomes? | Clear ownership boundaries (Two-Pizza Teams owning a service end to end), named owners for every resource and runbook. |
| OPS 3 | How does your organizational culture support your business outcomes? | Empowered teams that can stop a bad deploy, blameless escalation, time and people to run what they own. |
| OPS 4 | How do you implement observability in your workload? | Emitting structured JSON telemetry, application-level business KPIs, dependency metrics, and distributed trace headers. |
| OPS 5 | How do you reduce defects, ease remediation, and improve flow into production? | Automated CI/CD, linting, unit/contract/integration testing, infrastructure as code (CDK/Terraform), small reversible changes. |
| OPS 6 | How do you mitigate deployment risks? | Canary deployments (e.g., 10% traffic for 15 minutes), automated rollback on error spikes, feature flags. |
| OPS 7 | How do you know that you are ready to support a workload? | Operational readiness reviews (ORR), runbooks and playbooks, on-call support plans. |
| OPS 8 | How do you utilize workload observability in your organization? | The 4 Golden Signals: Latency (P95/P99), Traffic (RPS), Errors (5xx rate), Saturation (CPU/RAM/Queue depth), with actionable alerts and dashboards. |
| OPS 9 | How do you understand the health of your operations? | Operations KPIs (time to detect, time to mitigate, deploy frequency) reviewed on a schedule. |
| OPS 10 | How do you manage workload and operations events? | Automated runbooks (AWS Systems Manager Automation), a response per alert, on-call escalation policies, customer communication plans. |
| OPS 11 | How do you evolve operations? | Amazon Correction of Errors (COE) framework: root cause analysis via "5 Whys" with preventive action items; GameDays; reducing on-call toil. |
2. Observability Architecture: The 4 Golden Signals & Distributed Tracing
In an Amazon interview, saying "I will monitor the system with CloudWatch" is too generic. You must specify the exact metrics, aggregation methods, and distributed tracing strategies:
Synthesizing vector architecture diagram...
Follow the solid arrows as the request's path: API Gateway, the order service, the SQS queue, then the fulfillment worker. The dotted arrows show the trace. API Gateway creates a trace ID (X-Amzn-Trace-Id) at the entry point, the order service passes it along in its calls and in the SQS message attributes, and the worker picks it up from the message and records its own segment. X-Ray or OpenTelemetry joins every segment with the same ID into one timeline, even across the asynchronous queue hop. Without propagation through the queue, the trace would break into two unrelated halves, which is the most common gap in tracing.
The 4 Golden Signals (Google SRE & Amazon Standard)
- Latency:
- Trap: Never monitor average (mean) latency! Averages mask severe P99 outliers.
- Standard: Monitor P50, P90, P99, and P99.9 latency. For an e-commerce API, target P99 .
- Traffic:
- Measure request rate (Requests Per Second - RPS / QPS) and distinguish read vs. write volume.
- Errors:
- Track absolute error count and error rate: .
- Set high-priority paging alarms if 5xx rate exceeds over a 2-minute rolling window.
- Saturation:
- Measure resource fullness: CPU utilization, memory pressure, database connection pool exhaustion, and message queue backlog (
ApproximateNumberOfMessagesVisible).
- Measure resource fullness: CPU utilization, memory pressure, database connection pool exhaustion, and message queue backlog (
Unlock Complete Architecture & Production Runbooks
You have explored the free architectural preview (~42%). Spend 1 Coin to unlock the remaining 4 production deep-dive sections for a full 24 hours.