AWS Support Topics
Every AWS support topic we cover, in one place.
Find the exact task you need help with. Each guide explains the problem, how we diagnose it, what we change and how we verify the fix.
AWS EC2 right-sizing without the riskRight-size AWS EC2 instances with real metrics. TwinTix uses CloudWatch, Compute Optimizer and testing to cut cost without hurting performance or availability.
AWS Savings Plans vs Reserved Instances: what to buyChoose between AWS Savings Plans and Reserved Instances. TwinTix sizes commitments from real usage so you save without over-committing.
EC2 status check failed: find the cause and recover the instanceEC2 instance status check failed or impaired? TwinTix finds whether AWS or your OS is at fault, recovers the instance and sets up automatic recovery.
EC2 SSH connection timed out: trace the path and restore accessCannot SSH or RDP into your EC2 instance? TwinTix traces the network path, security groups, NACLs and OS firewall to restore access safely.
EC2 T3 and T4g CPU credit throttling: diagnose and fixSlow EC2 T3, T3a or T4g instance? TwinTix checks CPU credit balance, unlimited mode and surplus charges, then fixes the sizing or instance family.
EC2 Spot interruption handling: run on Spot without outagesRun EC2 Spot safely. TwinTix designs for the two-minute interruption notice with diversified pools, capacity rebalancing and graceful draining.
EC2 Graviton migration: move to arm64 with proof it worksMove EC2 workloads to Graviton instances safely. TwinTix checks ARM compatibility, rebuilds images, benchmarks and rolls out with rollback in place.
EC2 AMI pipeline and patching with Image Builder and Patch ManagerBuild golden AMIs with EC2 Image Builder and patch fleets with Systems Manager Patch Manager. TwinTix sets up the pipeline, baselines and rollout.
ECS Fargate cost optimization: pay for the tasks you actually needLower your ECS Fargate bill. TwinTix right-sizes tasks, applies Fargate Spot, Graviton and Savings Plans, and removes hidden networking and log costs.
ECS task stopped with exit code 137: find out why and fix itECS tasks stopping with exit code 137 or OutOfMemoryError? TwinTix reads stopped reasons and metrics to find OOM kills, failed health checks and bad shutdowns.
ECS deployment circuit breaker and automatic rollbackStop bad ECS deployments from taking you down. TwinTix configures the circuit breaker, health settings and alarms for automatic rollback.
ECS CannotPullContainerError: why images fail to pull and the fixFix ECS CannotPullContainerError for ECR and Docker Hub images. TwinTix checks networking, endpoints, IAM, tags and rate limits to get tasks running.
EKS cost optimization with KarpenterCut Amazon EKS costs with Karpenter, right-sized requests, Spot and Graviton nodes. TwinTix implements and tunes autoscaling without hurting reliability.
EKS version upgrade: plan, test and run it without downtimeUpgrade Amazon EKS without downtime. TwinTix checks deprecated APIs, add-ons and node groups, then runs the control plane and node upgrade in order.
EKS pods stuck Pending or in CrashLoopBackOff: causes and fixesTroubleshoot EKS pods stuck Pending, CrashLoopBackOff or ImagePullBackOff. TwinTix reads events, logs and node capacity to find and fix the cause.
EKS IRSA vs EKS Pod Identity: pick one and set it up correctlyGive EKS pods least-privilege AWS access. TwinTix compares IRSA and EKS Pod Identity, sets up roles and trust policies, and fixes AccessDenied errors.
EKS VPC CNI IP exhaustion: fix pod IP and max-pods limitsOut of pod IPs on EKS? TwinTix fixes subnet exhaustion and max-pods limits with prefix delegation, custom networking, warm pool tuning and IPv6 options.
Elastic Beanstalk environment health Severe or Degraded: how we fix itElastic Beanstalk environment Severe, Degraded or Warning? TwinTix reads enhanced health, logs and events to find the real cause and restore it.
Elastic Beanstalk platform upgrade: move to a supported platform branchUpgrade Elastic Beanstalk platforms before they retire. TwinTix plans blue/green swaps, runtime and OS changes, and managed updates with a rollback path.
Migrate from Elastic Beanstalk to Amazon ECSMove from Elastic Beanstalk to ECS on Fargate. TwinTix containerizes the app, rebuilds config as task definitions and cuts over with weighted DNS.
ALB 502, 503 and 504 errors: find which side is failingFix Application Load Balancer 502 Bad Gateway, 503 and 504 Gateway Timeout errors. TwinTix uses access logs and metrics to find the failing hop.
ALB vs NLB: choosing the right AWS load balancerChoosing between ALB, NLB and Gateway Load Balancer? TwinTix compares routing, client IP, TLS, static IPs and cost to match the right type to your app.
ALB access logs: enable them and analyze with AthenaTurn ALB access logs into answers. TwinTix enables logging to S3, builds Athena tables and queries for 5xx errors, slow targets and top clients.
Target group health check failures: decode the reason and fix itTargets unhealthy in your ALB or NLB target group? TwinTix decodes the reason codes and fixes ports, paths, security groups and timing.
EBS gp2 to gp3 migration: lower cost with performance you controlMove EBS volumes from gp2 to gp3 with no downtime. TwinTix sizes IOPS and throughput, applies Elastic Volumes changes and fixes your IaC defaults.
EBS snapshot lifecycle: automate backups with Data Lifecycle ManagerAutomate EBS backups with Amazon Data Lifecycle Manager. TwinTix sets policies, retention, cross-Region copies and cleans up orphaned snapshots.
EBS performance troubleshooting: volume, instance or workloadSlow EBS volume or high disk latency? TwinTix checks volume limits, burst balance, instance EBS limits and snapshot initialization to find the bottleneck.
Amazon EFS throughput modes and cost: Elastic, Provisioned or BurstingSlow or costly Amazon EFS? TwinTix compares Elastic, Provisioned and Bursting throughput, tunes lifecycle storage classes and fixes mount performance.
AWS Lambda power tuning: the right memory for every functionCut AWS Lambda cost and latency with power tuning. TwinTix runs the tuning, reads the cost and speed curve, and applies the best memory and architecture.
AWS Lambda cold start optimizationReduce AWS Lambda cold start latency. TwinTix measures init time, shrinks packages and applies SnapStart, Provisioned Concurrency or runtime changes where they pay off.
AWS Lambda concurrency and throttling fixesFix AWS Lambda throttling and TooManyRequestsException. TwinTix sets reserved and provisioned concurrency, queue limits and protects downstream systems.
Fixing the Lambda 'Task timed out after N seconds' errorFix AWS Lambda 'Task timed out after N seconds'. TwinTix finds the slow call, fixes timeouts, retries and downstream limits, and sets safe timeout values.
Fixing Lambda functions in a VPC that cannot reach the internetFix AWS Lambda in a VPC that cannot reach the internet, S3, DynamoDB or other AWS services. TwinTix sets up NAT or VPC endpoints and verifies the route.
AWS Lambda Graviton (arm64) migrationMigrate AWS Lambda functions to Graviton arm64 safely. TwinTix checks native dependencies, layers and containers, benchmarks both architectures and rolls out.
Reducing AWS Lambda CloudWatch logging costsCut the CloudWatch Logs bill from AWS Lambda. TwinTix sets log levels, retention, sampling and log classes while keeping the logs you need to debug.
Fixing Lambda AccessDenied and execution role errorsTroubleshoot AWS Lambda AccessDenied and not authorized errors. TwinTix traces the failing call in CloudTrail and fixes execution role, resource and KMS policies.
Fix API Gateway 504 Endpoint Request Timed OutFix AWS API Gateway 504 Gateway Timeout. TwinTix finds slow integrations and redesigns long-running requests with asynchronous patterns.
Fixing CORS errors with AWS API GatewayFix 'blocked by CORS policy' with AWS API Gateway. TwinTix configures preflight, headers, Lambda responses and gateway errors for REST and HTTP APIs.
Fixing API Gateway 502 Bad Gateway with Lambda proxyFix 502 Bad Gateway and 'Malformed Lambda proxy response' from AWS API Gateway. TwinTix reads execution logs, corrects response format and Lambda errors.
API Gateway REST API vs HTTP API: choosing and migratingChoose between AWS API Gateway REST API and HTTP API, and migrate safely. TwinTix maps features, authorizers and cost, then moves routes with no outage.
API Gateway throttling, usage plans and API keysFix 429 Too Many Requests and design API Gateway throttling, usage plans and API keys. TwinTix sets limits that protect backends without blocking real users.
AWS Step Functions error handling: Retry and CatchBuild reliable AWS Step Functions workflows. TwinTix adds Retry, Catch, timeouts and compensation so transient failures recover and real failures are visible.
Step Functions Standard vs Express workflowsChoose between Step Functions Standard and Express workflows. TwinTix compares duration, execution guarantees, logging and cost, and converts safely.
Fixing an EventBridge rule that is not triggeringFix an AWS EventBridge rule that does not trigger. TwinTix checks event bus, pattern matching, target permissions and dead-letter queues, and proves delivery.
Replacing cron servers with EventBridge SchedulerMove cron jobs from EC2 servers to AWS EventBridge Scheduler. TwinTix converts schedules, sets time zones, retries and dead-letter queues, and retires the server.
SQS dead-letter queues and redriveSet up and monitor AWS SQS dead-letter queues and redrive messages safely. TwinTix configures maxReceiveCount, retention, alarms and replay after fixing the bug.
SQS visibility timeout and duplicate messagesFix duplicate SQS message processing. TwinTix sets visibility timeout from consumer duration, adds idempotency and handles long-running jobs correctly.
SNS to SQS fan-out and subscription filter policiesBuild and debug AWS SNS to SQS fan-out. TwinTix fixes queue policies, filter policies, raw delivery and failed deliveries with DLQs and delivery logs.
Tuning Lambda SQS event source mappingsTune AWS Lambda SQS triggers: batch size, batching window, partial batch responses and maximum concurrency. TwinTix stops poison messages and throttling.
SQS FIFO throughput, message groups and orderingDesign AWS SQS FIFO queues for throughput and ordering. TwinTix chooses message group IDs, deduplication, high throughput mode and handles blocked groups.
Migrating users to Amazon Cognito with a Lambda triggerMigrate users to AWS Cognito without forcing password resets. TwinTix builds the user migration Lambda trigger, handles passwords safely and cuts over cleanly.
Validating Amazon Cognito JWT tokens correctlyVerify AWS Cognito ID and access tokens in your API or Lambda. TwinTix checks signature, issuer, expiry, token use and client ID, and sets up authorizers.
Amazon Cognito SAML and social identity provider federationSet up AWS Cognito federation with SAML identity providers and Google, Apple or Facebook. TwinTix fixes redirect URI, attribute mapping and account linking errors.
Fixing AWS Amplify Hosting build failuresFix failing AWS Amplify Hosting builds: npm errors, Node version, out of memory, missing environment variables and wrong output directory. TwinTix finds the cause.
AWS Amplify custom domain and SSL certificate setupFix AWS Amplify custom domain stuck on pending verification and SSL certificate errors. TwinTix sets DNS, apex and www records, and Route 53 or external DNS.
AWS Amplify redirects and rewrites for single-page appsFix 404 on refresh for React, Vue and Angular apps on AWS Amplify. TwinTix writes the rewrite rule, handles trailing slashes, www redirects and proxying APIs.
AWS S3 lifecycle policies and storage cost optimizationLower AWS S3 costs with lifecycle rules, Intelligent-Tiering and cleanup of old versions and incomplete uploads. TwinTix designs policies that are safe to run.
Fix AWS S3 Access Denied (403) errorsFix S3 AccessDenied 403 errors. TwinTix traces IAM, bucket policy, Block Public Access, KMS, VPC endpoint and SCP causes and verifies the fix.
AWS S3 public access audit and lockdownAudit AWS S3 buckets for public exposure. TwinTix reviews Block Public Access, policies, ACLs and Access Analyzer findings, then locks down safely.
Fix S3 presigned URL errorsFix S3 presigned URL failures: SignatureDoesNotMatch, expired requests and AccessDenied. TwinTix debugs signing, credentials, CORS and Region issues.
AWS S3 cross-Region replication setupSet up S3 Cross-Region Replication for disaster recovery and compliance. TwinTix handles IAM, KMS, existing objects, monitoring and failover testing.
Recover deleted or overwritten S3 objectsRecover deleted or overwritten S3 objects with versioning. TwinTix restores data, cleans delete markers, and adds MFA Delete, Object Lock and lifecycle rules.
AWS RDS Proxy setup and tuningSet up AWS RDS Proxy to fix too many connections, protect databases from Lambda bursts and speed failover. TwinTix handles design, secrets, IAM auth and tuning.
Fix AWS RDS high CPU and slow queriesFix AWS RDS high CPU and slow queries. TwinTix uses Performance Insights, Enhanced Monitoring and slow query logs to find and remove the real bottleneck.
Fix RDS "too many connections" errorsFix AWS RDS too many connections errors on MySQL, MariaDB and PostgreSQL. TwinTix finds leaks, tunes max_connections, and adds pooling.
Fix AWS RDS storage full and set up autoscalingFix an AWS RDS instance running out of storage. TwinTix recovers space, finds what is growing, and configures storage autoscaling and alarms.
AWS RDS major version upgrade with minimal downtimePlan an AWS RDS major version upgrade with minimal downtime. TwinTix handles pre-checks, extensions, Blue/Green deployments, testing and rollback.
AWS RDS Multi-AZ failover testingTest AWS RDS Multi-AZ failover safely. TwinTix measures real recovery time, fixes DNS and connection retry problems, and documents the runbook.
Aurora Serverless v2 capacity (ACU) tuningTune Aurora Serverless v2 min and max ACU for cost and performance. TwinTix reads capacity metrics, fixes slow scaling and sets safe limits.
Fix Aurora replica lagDiagnose and fix Aurora replica lag. TwinTix reads AuroraReplicaLag, finds heavy writes and long queries, and sizes readers and endpoints correctly.
Aurora Global Database disaster recoveryDesign and test Aurora Global Database disaster recovery. TwinTix sets up secondary Regions, monitors lag, and rehearses switchover and failover.
Migrate RDS MySQL or PostgreSQL to AuroraMigrate RDS MySQL or PostgreSQL to Aurora with minimal downtime. TwinTix compares snapshot, Aurora read replica and DMS paths, tests and cuts over.
Aurora failover and DNS caching behaviorFix slow recovery after Aurora failover. TwinTix tunes DNS TTL, JVM caching, drivers and RDS Proxy so applications reconnect to the new writer quickly.
Fixing DynamoDB hot partitions and throttlingFix DynamoDB hot partitions and throttling. TwinTix finds hot keys with Contributor Insights and redesigns keys, sharding and caching for even load.
DynamoDB on-demand vs provisioned capacityChoose between DynamoDB on-demand and provisioned capacity. TwinTix analyzes traffic, models cost, and sets auto scaling or on-demand with safe limits.
DynamoDB point-in-time recovery and restoreSet up and test DynamoDB point-in-time recovery, on-demand backups and AWS Backup. TwinTix restores tables and rebuilds the settings a restore leaves out.
DynamoDB TTL and Streams setupSet up DynamoDB TTL expiry and Streams with Lambda correctly. TwinTix handles attribute format, delayed deletes, filters and failure handling.
DynamoDB global tables for multi-Region applicationsSet up DynamoDB global tables for multi-Region apps. TwinTix covers replica design, conflict resolution, cost, failover routing and testing.
ElastiCache Redis memory and eviction troubleshootingFix ElastiCache Redis memory pressure, evictions and OOM command errors. TwinTix finds big keys, sets TTLs and eviction policy, and right-sizes nodes.
Fix ElastiCache cannot connect and timeout errorsFix ElastiCache connection timeouts and refused connections. TwinTix checks VPC, security groups, subnet groups, TLS, AUTH and cluster endpoints.
ElastiCache caching strategy and invalidation patternsDesign an ElastiCache caching strategy: cache-aside, write-through, TTL and invalidation patterns that avoid stale data and stampedes.
Migrate self-managed Redis to ElastiCacheMigrate self-managed Redis to ElastiCache with low downtime. TwinTix plans RDB seeding or online migration, cutover, validation and rollback.
Redshift query tuning with distribution and sort keysTune slow Amazon Redshift queries. TwinTix reads query plans, fixes distribution and sort keys, vacuum, statistics and compression for faster results.
Redshift Serverless vs provisioned clustersChoose between Amazon Redshift Serverless and provisioned RA3 clusters. TwinTix compares workload shape, cost and limits and sets usage guardrails.
Loading data into Redshift with COPY from S3Load data into Redshift from S3 with COPY. TwinTix fixes load errors, splits and compresses files, uses manifests and sets up auto-copy pipelines.
Fix OpenSearch cluster status red or yellowFix Amazon OpenSearch Service red and yellow cluster status. TwinTix finds unassigned shards, disk and watermark issues, and recovers indices safely.
OpenSearch shard sizing strategyRight-size Amazon OpenSearch shards. TwinTix fixes oversharding, balances shard size, sets index templates and rollover to cut cost and instability.
Fix OpenSearch high JVM memory pressureFix Amazon OpenSearch high JVMMemoryPressure, circuit breaker errors and slow searches. TwinTix finds heavy queries, fielddata and shard overload.
Improve your CloudFront cache hit ratioRaise your AWS CloudFront cache hit ratio. TwinTix tunes cache policies, headers, TTLs and compression to cut latency and origin load.
Fixing CloudFront 403, 502 and 504 errorsTroubleshoot CloudFront 403, 502 and 504 errors. TwinTix traces the failing layer, from viewer to edge to origin, and fixes the cause.
CloudFront origin access control for private S3 bucketsLock an S3 bucket behind CloudFront with origin access control. TwinTix migrates from OAI, fixes bucket policies and handles SSE-KMS and 403 errors.
Lambda@Edge vs CloudFront Functions: picking the right oneChoose between Lambda@Edge and CloudFront Functions. TwinTix maps your redirects, auth and header logic to the right option and implements it.
CloudFront signed URLs and signed cookiesProtect paid or private content with CloudFront signed URLs and signed cookies. TwinTix sets up key groups, signing and fixes 403 errors.
Reduce AWS NAT gateway costsCut AWS NAT gateway charges. TwinTix finds what drives NAT data processing costs and fixes it with VPC endpoints, routing and architecture changes.
AWS VPC design and CIDR planningPlan AWS VPC CIDR ranges and subnets that will not collide later. TwinTix designs multi-account, multi-AZ layouts ready for peering and hybrid links.
Private subnet cannot reach the internet: a step-by-step fixFix EC2 or Lambda in a private subnet that cannot reach the internet. TwinTix checks routes, NAT, security groups, NACLs and DNS in order.
VPC endpoints and PrivateLink setupSet up VPC gateway and interface endpoints and PrivateLink. TwinTix keeps AWS traffic private, cuts NAT use and fixes endpoint DNS and policy issues.
VPC Flow Logs: setup and analysisSet up and analyze VPC Flow Logs to find blocked traffic, top talkers and NAT cost drivers. TwinTix builds Athena and Logs Insights queries.
Route 53 failover routing and health checksSet up Route 53 DNS failover with reliable health checks. TwinTix designs primary and secondary records, tunes TTLs and tests the failover end to end.
Migrating DNS to Route 53 with no downtimeMove your domain's DNS to Route 53 without downtime. TwinTix exports records, lowers TTLs, verifies answers and switches name servers safely.
Route 53 private hosted zones and Resolver endpointsSet up Route 53 private hosted zones and Resolver endpoints for hybrid DNS. TwinTix fixes resolution between VPCs, accounts and on-premises networks.
Route 53 alias vs CNAME: which to useUnderstand Route 53 alias vs CNAME records. TwinTix fixes apex domain errors and points domains to CloudFront, ELB and S3 correctly and cheaply.
Troubleshooting AWS AccessDenied errorsFix AWS AccessDenied and UnauthorizedOperation errors. TwinTix checks identity policies, resource policies, SCPs, permission boundaries and session policies.
Least privilege with IAM Access AnalyzerShrink over-broad IAM permissions with Access Analyzer. TwinTix finds unused access and external sharing, then generates least-privilege policies.
Fixing cross-account AssumeRole errorsFix sts:AssumeRole AccessDenied in cross-account setups. TwinTix checks trust policies, external IDs, caller permissions, MFA and regional STS.
AWS IAM Identity Center (SSO) setupSet up IAM Identity Center for single sign-on across AWS accounts. TwinTix connects your identity provider, builds permission sets and retires IAM users.
AWS WAF false positive tuningStop AWS WAF blocking legitimate users. TwinTix uses Count mode, sampled requests and logs to tune managed rules with scope-down and exclusions.
AWS WAF rate-based rules and Bot ControlStop credential stuffing, scraping and abusive clients with AWS WAF rate-based rules and Bot Control. TwinTix designs and tunes them to avoid blocking users.
AWS WAF logging setup and cost controlSet up AWS WAF logging to S3, CloudWatch or Firehose and control the cost. TwinTix redacts fields, filters logs and builds Athena queries.
AWS DDoS protection design with ShieldDesign layered DDoS protection on AWS. TwinTix uses CloudFront, Route 53, WAF and Shield, plus scaling and runbooks to keep your application available.
CloudWatch alarm design that people trustDesign CloudWatch alarms that catch real outages without noise. TwinTix builds symptom-based alarms, picks thresholds and handles missing data.
Reducing CloudWatch Logs costCut CloudWatch Logs spend by finding the expensive log groups. TwinTix sets retention, trims noisy logging and uses the Infrequent Access class.
CloudWatch Logs Insights query patternsPractical CloudWatch Logs Insights queries for errors, latency and Lambda issues. TwinTix writes and saves queries that cut incident time and scan cost.
CloudWatch agent for memory and disk metricsGet memory and disk metrics from EC2 with the CloudWatch agent. TwinTix installs, configures and troubleshoots it, and sets alarms on the results.
Recovering a CloudFormation stack in UPDATE_ROLLBACK_FAILEDRecover a CloudFormation stack stuck in UPDATE_ROLLBACK_FAILED or ROLLBACK_FAILED. TwinTix finds the blocking resource and gets the stack healthy again.
CloudFormation drift detection and remediationFind and fix CloudFormation drift. TwinTix runs drift detection, decides whether to revert or adopt changes and prevents manual console edits.
Fixing AWS CDK bootstrap and deployment errorsFix AWS CDK bootstrap and cdk deploy errors. TwinTix solves missing bootstrap stack, version, role assumption and asset publishing problems.
Fixing CloudFormation circular dependency errorsResolve CloudFormation Circular dependency between resources errors. TwinTix breaks the loop in security groups, IAM, Lambda and nested stacks.
Do Not See Your Problem Here?
Schedule an appointment. If it runs on AWS, our engineers can help.
Schedule Appointment › No commitment required