
10 AWS DevOps Practices We Actually Use in Production in 2026
Real AWS DevOps practices from production: GitOps on EKS, OpenTelemetry, supply chain security, chaos engineering with FIS, and AI-assisted DevOps with Amazon Q.
Tagged

Real AWS DevOps practices from production: GitOps on EKS, OpenTelemetry, supply chain security, chaos engineering with FIS, and AI-assisted DevOps with Amazon Q.

July 2026: AWS Support is Business Support+ (from $29/mo), Enterprise (from $5k/mo), and Unified Operations — legacy Developer/Business/On-Ramp sunset 2027-01-01. What 24/7 third-party managed monitoring still adds, with an SLA scorecard.

When staging is green and prod fails, it's usually config drift — not the commit. July 2026 refresh: IaC parity, intentional size deltas, drift checks that catch SG and parameter-group surprises.

Detect AWS config drift with terraform plan + Config. July 2026 runbook: schedule, triage, prevent console writes.

AWS IoT architecture patterns for manufacturing, smart buildings, and connected devices — from device connectivity to data ingestion, edge processing with Greengrass, and real-time analytics.

One bad `terraform apply` still deletes databases. July 2026: plan→review→apply, no -auto-approve, OIDC CI, Atlantis/HCP Terraform gates.

Terraform on AWS: import, state mv/rm, stuck locks. July 2026 — S3 use_lockfile (TF 1.10+); DynamoDB locking is legacy.

SOC 2 Type II certification proves your controls are effective over 6-12 months. This guide covers the compliance roadmap, AWS security controls, documentation requirements, and audit preparation for 2026 certification.

Amazon Bedrock Agents Classic automate workflows by giving foundation models the ability to call tools (APIs, Lambda, databases). This guide covers building agents with tool definitions, testing in the console, handling errors, and scaling to production.

Amazon Bedrock Knowledge Bases automate the RAG (Retrieval-Augmented Generation) pipeline — semantic search, chunking, embedding, and context injection into Claude or other foundation models. This guide covers setup, data ingestion, cost optimization, and production patterns.

Glue ETL + Athena SQL without servers — still the default lake path. July 2026: Glue 5.x jobs, Parquet partitions, ~$0.44/DPU-hour + $5/TB scan math, pipeline checklist.

WAF beyond “enable managed rules”: COUNT→BLOCK, rate limits, Bot Control cost traps, GraphQL depth. July 2026 API protection checklist.