Event-driven AWS, in production

I find the failure modes in event‑driven AWS systems before production does.

Ex-Amazon senior backend engineer, 15 years. I review EventBridge, SQS, Step Functions, Lambda and ECS stacks, including the LLM calls now running through them.

  1. EventBridgeAnyCompany bus

    F-06 No DLQ on any target. A failed delivery is dropped.

  2. Step FunctionsTransactionProcess

    F-05 Standard where Express fits: ~USD 1,950/mo vs ~USD 30 at 10 TPS.

  3. Lambdapublish-events

    F-03 Returns a failed PutEvents as success. Events vanish.

  4. SQSLegacyOperationQueue

    F-04 Queue policy accepts SendMessage from any AWS account.

Simplified event path from the sample audit of aws-samples/app-2025. Four of its 24 findings.
15 years
building and running backend systems, including Staff Engineer and tech lead roles
5 years at Amazon
built a real-time event platform for Ring from zero on ECS, SQS, Lambda and DynamoDB
Five nines
on a production signup path with LLM-backed checks in the request flow
On the pager
still on call for a production AWS stack, from Buenos Aires in US Eastern hours

Fixed-price audit

AWS Serverless Architecture Audit

An independent senior review of your event-driven stack. What will break, what is costing you money, and the order to fix it in.

USD 3,500

Fixed price. 10 business days from kickoff.

First three audits booked before 30 November 2026: USD 2,100 in exchange for a named case study.

Where event-driven systems break

Small teams with coding agents now ship more infrastructure than anyone reviews. These are six of the areas every audit covers, and each finding comes with evidence from your account, not a checklist tick.

Full scope

What a finding looks like

From the public sample audit of a published AWS reference application, reviewed exactly as a client stack would be.

F-03 Reliability, data loss

A failed PutEvents is reported as success

The function that publishes every downstream event returns an error object instead of throwing. The workflow ends green, nothing pages because there are no alarms, and the events are gone.

Fix: throw on FailedEntryCount > 0. One line, same afternoon.

F-04 Security

An SQS queue open to any AWS account

ForAllValues:ArnEquals on a single-valued key passes when the key is missing.

F-05 Cost

~USD 1,900 a month in state transitions

A two-state Standard workflow on the per-transaction path. Express runs it for ~USD 30.

Read all 24 findings

Twenty minutes to find out if it fits.

Tell me what the stack looks like and what worries you. If the audit is the wrong tool, I'll say so on the call.