Emergency Incident Response
Queue backlog growing without bound, consumers stalled, or a redrive that pushed thousands of messages back into a live queue. A senior engineer joins a live bridge within 15 minutes — not a ticket acknowledgement.
Amazon SQS Support
Last reviewed by Scott Sternloff
AceMQ supports Amazon SQS in production — duplicate processing from visibility timeouts shorter than the handler, FIFO queues capped by a single message group, dead-letter queues that fill silently, and Lambda event source mappings that scale the wrong way under load. Every ticket reaches a named senior engineer who already knows your queue and consumer topology.
Planning a build, upgrade or migration instead? See AceMQ Amazon SQS consulting and services.
Customers




Partners


Incident Triage
These are real symptoms from real Amazon SQS production environments — and the first thing our engineers check when one comes in.
| Symptom you're seeing | What we check first | Typical resolution |
|---|---|---|
| The same message processed several times across different workers | Handler duration against VisibilityTimeout, and whether the consumer extends visibility mid-processing. A handler that outlives the timeout releases the message back to the queue while still working on it, so a second worker starts the same job. | Under 1 hour |
| FIFO queue throughput flat at roughly 300 messages per second | MessageGroupId cardinality. Ordering is enforced per group, so a constant or low-cardinality group ID serializes the entire queue. High-throughput mode with per-message-group deduplication lifts this, but only if the group IDs actually spread. | 1–3 hours |
| ApproximateAgeOfOldestMessage climbing while consumers look healthy | Whether a poison message is cycling — received, failed, returned to visible, received again — without ever reaching maxReceiveCount. A redrive policy that is missing or set too high lets one bad message occupy consumer capacity indefinitely. | Under 2 hours |
| Lambda consumers not scaling up despite a deep backlog | Event source mapping concurrency, the account's reserved and unreserved concurrency split, and whether the function is erroring. Lambda backs off its poller scaling on sustained invocation errors, so a failing handler looks like a scaling limit. | 1–3 hours |
| Empty receives dominating the bill while messages are clearly queued | Whether ReceiveMessage is using short polling. Short polling samples a subset of the distributed queue hosts and frequently returns nothing even when the queue is not empty, inflating request cost and adding latency. Long polling with a WaitTimeSeconds of 20 removes both. | Under 1 hour |
| Messages disappearing between SNS or EventBridge and the queue | The queue access policy and, for cross-account or encrypted queues, whether the KMS key policy allows the publishing service principal. A denied delivery from SNS is not retried indefinitely and leaves no trace in your consumer logs. | 1–2 hours |
| SendMessage failing intermittently with throttling under burst | Per-queue request rate against the API limits for the queue type, plus whether the SDK's default retry and backoff has been overridden. FIFO queues throttle far earlier than standard queues, and batching ten messages per API call is usually the fix. | 1–2 hours |
| Messages larger than 256 KB failing or arriving truncated | Whether the extended client library is in use on both sides. The S3-backed large payload pattern only works when the consumer resolves the pointer too — a producer using it against a plain consumer delivers an S3 reference nobody dereferences. | Under 2 hours |
Resolution times reflect typical Amazon SQS engagements under an active AceMQ support contract. Every P1 closes with a written root-cause analysis.
What's Included
No add-on pricing for incidents. No per-ticket charges. One contract covers the whole surface.
Queue backlog growing without bound, consumers stalled, or a redrive that pushed thousands of messages back into a live queue. A senior engineer joins a live bridge within 15 minutes — not a ticket acknowledgement.
Every P1 closes with a written RCA: the CloudWatch evidence, the queue and consumer settings involved, the fix applied, and the change that prevents recurrence.
Long polling, batch sizing, visibility timeout calibration, FIFO message group design, and consumer concurrency tuned against actual handler duration. SQS bills per request, so tuning throughput and tuning cost are the same exercise.
Lambda event source mappings, ECS and Fargate pollers, Spring Cloud AWS, and the AWS SDKs across Java, Python, .NET, and Node — including the retry and backoff behavior that turns a transient fault into a DLQ flood.
Queue policy and IAM design, SSE-KMS key policies for SNS, EventBridge, and S3 event sources, VPC endpoint configuration, and the cross-account patterns where a silent access denial looks exactly like message loss.
Migration from self-managed brokers onto SQS, and honest guidance on when SQS is the wrong fit — fan-out, replay, ordering across many partitions, and complex routing generally belong on Kafka or RabbitMQ instead.
Why AceMQ
The same senior engineers stay on your account. They know your queue layout, your redrive policies, and which consumers sit behind which queues — so a P1 call starts with diagnosis instead of orientation.
You reach a senior engineer directly by phone, email, or Slack. Nobody collects a case description to pass along, and no support-plan tier decides how long you wait for someone who can actually read your CloudWatch metrics.
SQS itself almost never fails. Nearly every SQS incident is a consumer problem: visibility timeout, retry behavior, concurrency, or an unhandled exception path. AWS support scopes to the service, which leaves the layer causing your incident unattended.
Engineers across 26+ countries and every time zone. Your 3am incident is someone's mid-afternoon — no overnight skeleton crew, no waiting for a region to wake up.
Quarterly reviews of oldest-message age, DLQ growth rate, empty-receive ratio, and request cost trend — so you catch a poison-message loop or a missing redrive policy before it becomes a weekend incident.
We support RabbitMQ, Kafka, ActiveMQ, and IBM MQ at the same depth. SQS has no replay, no fan-out to multiple independent consumers, and no routing beyond one queue per destination. We will tell you plainly when you have outgrown it.
Cloud, Kubernetes, bare metal, hybrid, and air-gapped — including environments where you can't give us outbound network access.
Escalation Path
Every tier reaches a senior Amazon SQS engineer. There is no tier-1 triage layer to get through.
P1 escalation path
A replay of one P1, from the first page to the written root-cause analysis
15-minute P1 response, 24/7.
A response time, not a resolution time.
P1 opened, on-call engineer paged
Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.
Senior engineer on your bridge
A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.
Specialists across the stack join
When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.
Written root-cause analysis
Root cause, the fix applied and the prevention steps, delivered after every P1.
Pricing
AceMQ Amazon SQS support contracts typically run $24,000–72,000 a year, depending on SLA level, scope (number of clusters or nodes, and environments) and deployment (self-managed, cloud-managed or Kubernetes).
| What moves the price | How it changes the contract |
|---|---|
| SLA level | Business-hours cover costs less than 24/7 cover with a 15-minute emergency response. |
| Scope | More clusters or nodes, and more environments, make a larger contract. |
| Deployment | Self-managed, cloud-managed and Kubernetes estates need different amounts of hands-on work. |
Covering several technologies under one contract, for example RabbitMQ, Kafka and Redis, earns an aggressive discount.
Support In Practice
Amazon SQS support and remediation work from AceMQ. Each card links to the full write-up: the queues and consumers, what AceMQ diagnosed or changed, and the result, so you can see how a similar problem was handled.
Digital Insurance Provider
Breaking a redrive loop where SQS messages were reprocessed indefinitely because the queue visibility timeout was shorter than the Lambda function timeout.
Consumer Subscription Business
Measuring memory, duration, and concurrency across a large Lambda estate to right-size functions that were provisioned by guesswork.
Online Marketplace Operator
A FIFO queue fed by order events drained far slower than its consumers could work, then stopped entirely behind a single malformed message. AceMQ traced both to how message groups were used.
Benefits Enrolment Platform
Failed enrolment events were disappearing from the dead-letter queue before anyone looked at them. The fix was a retention setting, a receive count, and a redrive path that did not create duplicates.
Freight and Transport Technology Company
Designing event-source mapping, batching, ordering, and failure handling for a Lambda estate that had grown without a consistent event architecture.
Support options
AceMQ offers Amazon SQS support in four tiers, each handing more of the day-to-day work to AceMQ: 24/7 support and incident management for queues your team runs, proactive monitoring that catches visibility, dead-letter and scaling problems first, managed SQS inside your own AWS account, and fully managed SQS run on your behalf from AceMQ-managed AWS accounts and infrastructure, including the consumers and bridges around it. Standard and FIFO queues are covered in all four.
You run it, we back you up
Best for: Teams that run SQS workloads themselves and need senior escalation cover.
You run it, we watch it with you
Best for: Teams that want a duplicate delivery or an expired dead-letter message found in a review, not in an outage.
We run it in your cloud or data centre
Best for: Regulated estates that must keep messaging inside their own AWS accounts.
We host it and run it, as a service
Best for: Teams that want SQS and the consumer layer around it operated for them.
| Who does what | Tier 1 24/7 support | Tier 2 Proactive monitoring | Tier 3 Managed, your infrastructure | Tier 4 Fully managed by AceMQ |
|---|---|---|---|---|
| Who runs Amazon SQS day to day? | Your team | Your team, with AceMQ reviews | AceMQ | AceMQ |
| Where does it run? | Your infrastructure | Your infrastructure | Your cloud account or data centre | AceMQ infrastructure |
| 24/7 incident response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response |
| Health checks and CVE alerts | On request | Scheduled | Included | Included |
| Patching and upgrades | Your team, AceMQ advises | Planned with AceMQ | Done by AceMQ | Done by AceMQ |
| Monitoring and on-call | Your team | Your team | AceMQ | AceMQ |
| Data, keys and accounts | Yours | Yours | Yours | Your data, hosted by AceMQ |
Every Tier can start as an ad hoc engagement or an annual partnership, and you can move up or down a Tier as your team changes.
One partner for Amazon SQS
Support is one part of what AceMQ does for Amazon SQS. The same engineers deliver consulting, health checks, migrations and end-of-life cover, and support the systems that usually run next to it.
SQS support covers 24/7 emergency incident response with a 15-minute SLA, written root cause analysis on every P1, throughput and cost tuning, consumer and integration debugging across Lambda, ECS, and EKS, IAM and KMS access design, and architecture review. Every ticket is handled by a named senior engineer assigned to your account. There is no tier-1 triage layer and no per-incident charge.
AWS support covers the SQS service, quota increases, and confirmed platform issues. SQS as a service rarely fails — the incidents teams actually experience come from visibility timeout calibration, retry and backoff behavior, Lambda concurrency, FIFO message group design, and IAM or KMS policies that silently drop deliveries. That is the consumer and integration layer, which sits outside what platform support will debug.
P1 emergencies — unbounded backlog growth, fully stalled consumers, a redrive that flooded a live queue — get a 15-minute first response with a senior engineer joining a live bridge. P2 critical issues are 1 hour, P3 high-priority 4 hours, and P4 standard questions next business day. These are contractual commitments, not best-effort targets.
Standard SQS is at-least-once by design, so duplicates are expected rather than exceptional. In practice they come from a handler running longer than the visibility timeout without extending it, a batch where one slow message pushes the whole batch past the timeout, or a consumer that crashes after doing its work but before calling DeleteMessage. We calibrate the timeout against measured handler duration and make the consumer idempotent, because eliminating duplicates entirely is not achievable on standard queues.
Usually yes, and usually not by changing a quota. FIFO ordering is enforced per MessageGroupId, so throughput is bounded by how many distinct groups you actually use. A constant or low-cardinality group ID serializes everything. We review whether your ordering requirement is genuinely global or per-entity — it is almost always per-entity — then redesign the group key and enable high-throughput mode, which typically lifts the ceiling by a large multiple.
SQS is excellent for durable work queues with independent consumers and simple retry semantics. It is a poor fit when you need replay of historical messages, fan-out to multiple independent consumer groups, ordering across many partitions with high throughput, or routing rules more complex than one queue per destination. Those workloads belong on Kafka or RabbitMQ. We support all of them, so the recommendation is not steered by what we happen to sell.
Amazon Simple Queue Service lets you attach a dead-letter queue to any standard or FIFO queue with a redrive policy. When a consumer receives a message more times than the maximum receive count without deleting it, SQS moves it from the source queue to the dead-letter queue. Nothing is lost, but nothing is processed either. The usual causes are a consumer that crashes on a particular payload, a visibility timeout shorter than the processing time so the message is redelivered while still being worked on, or a downstream dependency that was down. Since 2021 the SQS console and API support redrive from the dead-letter queue back to the source queue once the fault is fixed. We set the alarms on dead-letter queue depth, find the cause, and run the redrive, which is a large share of what SQS support actually involves.
Encrypt at rest with server-side encryption using AWS Key Management Service keys, control access with IAM policies and queue policies that name the exact principals allowed to send and receive, and keep traffic private with VPC endpoints so consumers never reach the SQS API over the public internet. Amazon Web Services lists Amazon SQS as HIPAA-eligible and in scope for its major compliance programmes, so regulated workloads are common on it. Two things still catch teams out: message payloads over 256 KB need the Amazon SQS Extended Client Library, which stores the body in Amazon S3, and that bucket needs the same encryption and access discipline as the queue; and access policies written years ago tend to be broader than anyone intended. Both are part of the review we do when we take on an SQS estate.
Sometimes. SQS is a fully managed message queuing service with no brokers to run, near-unlimited throughput on standard queues, and pay-per-request pricing, which makes it the right default for decoupling services on AWS. It is not a log: messages are removed once consumed, there is no replay, and FIFO queues cap throughput per message group. Workloads that need ordered replay, many independent consumers of the same stream, or exactly-once semantics across a pipeline tend to sit better on Kafka or Kinesis. Estates with JMS applications and protocol requirements such as AMQP or MQTT usually want Amazon MQ or a self-managed broker. We support all of them, so the advice is not tied to a product, and we say plainly when SQS is the wrong tool.
Yes. AceMQ works on Amazon SQS in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.
Every AceMQ proposal is tailored to your requirements: your Amazon SQS environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how Amazon SQS is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.
Let's talk
Reactive cover, proactive reviews, or AceMQ running Amazon SQS for you on your infrastructure or ours. A senior engineer scopes it with you, and quote requests are answered within 1 hour.
Production incident right now?Email an Amazon SQS Architect
Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.
305-204-2607info@acemq.comPrefer to talk now? Call us directly or use the consultation tab to find a time that works.