Debug AWS ALB target health using reason codes and the direct target
ALB nodes probe each registered target with the target group's protocol, port, path, matcher, interval, and thresholds before routing normal traffic.
Use an EC2 Auto Scaling lifecycle hook with a bounded completion path
A lifecycle hook pauses an instance in a pending or terminating wait state until a controller completes, abandons, or reaches the heartbeat timeout.
Send selected server logs through the CloudWatch agent without copying secrets
The unified agent tails configured files, batches records, and writes to named log groups and streams using its instance role and local state files.
Create an EBS snapshot with an application consistency boundary
EBS snapshots capture block state incrementally and asynchronously; crash consistency differs from an application-coordinated filesystem or database checkpoint.
Restore an EBS snapshot to a separate volume and verify before attachment
Creating a volume from a snapshot reconstructs blocks lazily in one Availability Zone; attachment and filesystem mounting are separate guest operations.
Require EC2 IMDSv2 after finding every metadata consumer
IMDSv2 uses a session token obtained with a PUT request and instance metadata options control token requirement, hop limit, and endpoint state.
Interpret EC2 system and instance status checks before rebooting
EC2 system checks cover underlying AWS infrastructure while instance checks cover guest reachability; attached EBS checks add another failure domain.
Debug EC2 role credentials without copying temporary secrets
An instance profile associates a role with EC2, and IMDS delivers automatically rotated temporary credentials to supported SDK credential chains.
Trace an AWS security-group path from load balancer to EC2
Security groups are stateful allow rules attached to network interfaces; reachability depends on both source attachment and destination rule, plus NACLs, routes, listeners, and guest sockets.
Verify AWS Session Manager access without opening inbound SSH
Session Manager authorizes an IAM principal, reaches a managed node through SSM Agent and service endpoints, and opens an audited channel without inbound port 22.