DynamoDB DNS failure takes down US-EAST-1
Oct 20, 06:48 UTCOct 20, 21:20 UTC
Duration
14h 32m
Impact
Critical
Root cause
DNS
AWS, 90 days
8 incidents
Affected
DynamoDBEC2Network Load BalancerLambdaus-east-1
Lesson: Automation that manages critical DNS needs its own guard against writing an empty record, and dependent services need to recover from a stale state on their own.
What happened
A latent race condition in the DynamoDB DNS management system left an empty DNS record for the regional endpoint dynamodb.us-east-1.amazonaws.com, and the automation failed to repair it. EC2 launches and Network Load Balancer health checks failed in turn, giving three distinct periods of customer impact.