Emergency Incident Response
Functions throttled, an event source stalled, a redrive loop, or a cost anomaly running in real time. A senior engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
AWS Lambda Support
Last reviewed by Scott Sternloff
AceMQ supports the serverless workloads you run on Lambda — cold start latency on customer-facing paths, throttling from shared account concurrency, SQS redrive loops, ENI exhaustion in VPC-attached functions, and the cost curve that goes vertical after one bad invoke pattern. Every ticket reaches a named senior engineer.
Planning a build, upgrade or migration instead? See AceMQ AWS Lambda consulting and services.
Customers




Partners


Incident Triage
These are real symptoms from real AWS Lambda production environments — and the first thing our engineers check when one comes in.
| Symptom you're seeing | What we check first | Typical resolution |
|---|---|---|
| p99 latency spikes on a customer-facing endpoint, p50 is fine | Init duration in the invocation logs against total duration. A long init phase means cold starts — usually heavy top-level imports, a large deployment package, or SDK clients constructed at module scope with slow credential resolution. | 1–2 hours |
| Functions returning 429 TooManyRequestsException under normal load | Account-level concurrent execution usage across every function in the region, not just this one. Unreserved concurrency is a shared pool — one batch job scaling up will throttle an unrelated API-facing function that never changed. | Under 1 hour |
| SQS messages processed repeatedly, DLQ filling with the same payload | Queue visibility timeout against the function timeout — visibility must exceed function timeout, conventionally by a wide margin. If it does not, the message reappears while the invocation is still running and gets processed again. | Under 1 hour |
| VPC-attached functions failing to start during a traffic surge | Available IP addresses in the subnets attached to the function and the Hyperplane ENI mapping. Small subnets shared with other workloads run out of addresses, and scaling stalls with network interface errors rather than a code failure. | 1–3 hours |
| Lambda bill doubled with no change in request volume | Billed duration times memory across functions, then invocation counts for anything self-triggering. The two usual causes are memory over-provisioned far past what the function uses, and a function writing to the same event source that triggers it. | 1–2 hours |
| Function times out consistently at the configured limit | Where time is actually spent — downstream call latency, connection setup, or a retry inside the SDK. A function waiting on a database whose connection pool is exhausted by the concurrent invocations will always look like a timeout problem instead of a pool problem. | 2–4 hours |
| Init phase failing intermittently with no application log lines | Work being done at module scope — secrets fetched, config downloaded, connections established. Any of it can exceed the init window on a cold start, and failures there produce almost no application logging because the handler never runs. | 2–4 hours |
| Kinesis or DynamoDB stream shard falls behind and never recovers | Iterator age against batch size, function duration, and error behaviour. A single poison record blocks its shard until it expires or the failure is handled, so throughput on that shard drops to zero while the others look healthy. | Same day |
Resolution times reflect typical AWS Lambda engagements under an active AceMQ support contract. Every P1 closes with a written root-cause analysis.
What's Included
No add-on pricing for incidents. No per-ticket charges. One contract covers the whole surface.
Functions throttled, an event source stalled, a redrive loop, or a cost anomaly running in real time. A senior engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Memory right-sizing against measured duration, invocation pattern review, log retention and ingest cost, and detection of recursive or self-triggering invokes before they show up on a monthly bill.
Init-phase profiling, package size and dependency reduction, lazy client construction, provisioned or SnapStart configuration where it pays for itself, and honest advice on where it does not.
SQS, Kinesis, DynamoDB Streams, EventBridge and API Gateway integrations tuned for batch size, visibility timeout, partial batch failure reporting, retry behaviour, and idempotency.
Least-privilege execution roles, VPC subnet and IP capacity planning, security group and endpoint configuration, and secret handling that does not put credentials in environment variables.
Structured logging, X-Ray or OpenTelemetry tracing across async boundaries, and alarms on the metrics that matter — throttles, iterator age, and errors — so failures surface before customers report them.
Why AceMQ
Lambda bills climb from memory set once and never measured, log retention nobody chose, and invoke patterns that quietly multiply. We measure each, fix the cause, and document it so the saving survives the next feature.
The same senior engineers stay on your account. They know your event sources, your concurrency posture, and your deployment tooling — so a P1 call starts with diagnosis, not twenty minutes of you explaining your architecture.
AWS operates the platform. Your handler code, your event source configuration, your IAM policy design, your concurrency allocation, and your cost profile are yours — and that is exactly where production incidents originate.
You reach a senior engineer directly by phone, email, or Slack. No help desk collecting information to pass along, and no escalation approval standing between you and someone who can actually fix it.
Most Lambda incidents are really event-source incidents. Messaging is our core discipline — SQS semantics, Kinesis shard behaviour, ordering, idempotency, and poison-message handling are home ground rather than adjacent knowledge.
Engineers across 26+ countries and every time zone. Your 3am incident is someone's mid-afternoon — no overnight skeleton crew, no waiting for a region to wake up.
Cloud, Kubernetes, bare metal, hybrid, and air-gapped — including environments where you can't give us outbound network access.
Escalation Path
Every tier reaches a senior AWS Lambda engineer. There is no tier-1 triage layer to get through.
P1 escalation path
A replay of one P1, from the first page to the written root-cause analysis
15-minute P1 response, 24/7.
A response time, not a resolution time.
P1 opened, on-call engineer paged
Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.
Senior engineer on your bridge
A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.
Specialists across the stack join
When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.
Written root-cause analysis
Root cause, the fix applied and the prevention steps, delivered after every P1.
Pricing
AceMQ AWS Lambda support contracts typically run $24,000–72,000 a year, depending on SLA level, scope (number of clusters or nodes, and environments) and deployment (self-managed, cloud-managed or Kubernetes).
| What moves the price | How it changes the contract |
|---|---|
| SLA level | Business-hours cover costs less than 24/7 cover with a 15-minute emergency response. |
| Scope | More clusters or nodes, and more environments, make a larger contract. |
| Deployment | Self-managed, cloud-managed and Kubernetes estates need different amounts of hands-on work. |
Covering several technologies under one contract, for example RabbitMQ, Kafka and Redis, earns an aggressive discount.
Support In Practice
AWS Lambda support and optimization work from AceMQ. Each card links to the full write-up: the serverless estate, what AceMQ diagnosed or changed, and the result.
Digital Insurance Provider
Breaking a redrive loop where SQS messages were reprocessed indefinitely because the queue visibility timeout was shorter than the Lambda function timeout.
Wealth Management Firm
Diagnosing VPC-attached Lambda invocation failures caused by ENI and subnet IP exhaustion during scale-out, and the connection handling that made it worse.
Consumer Subscription Business
Measuring memory, duration, and concurrency across a large Lambda estate to right-size functions that were provisioned by guesswork.
Benefits Enrolment Platform
Failed enrolment events were disappearing from the dead-letter queue before anyone looked at them. The fix was a retention setting, a receive count, and a redrive path that did not create duplicates.
Freight and Transport Technology Company
Designing event-source mapping, batching, ordering, and failure handling for a Lambda estate that had grown without a consistent event architecture.
Support options
AceMQ offers AWS Lambda support in four tiers, each handing more of the day-to-day work to AceMQ: 24/7 support and incident management for functions your team runs, proactive monitoring that finds throttling, retry and cost problems first, managed Lambda operations inside your own AWS account, and fully managed Lambda run on your behalf from AceMQ-managed AWS accounts and infrastructure, with the pipelines, collectors and brokers around it. Runtimes and event sources are covered in all four.
You run it, we back you up
Best for: Teams that run Lambda themselves and need senior cover when a hot path throttles.
You run it, we watch it with you
Best for: Teams that want the shared-concurrency throttle or the runaway invoke found in a review, not on the invoice.
We run it in your cloud or data centre
Best for: Regulated estates and platform teams that must keep serverless workloads inside their own AWS accounts.
We host it and run it, as a service
Best for: Teams that want Lambda and the pipelines and messaging around it operated end to end.
| Who does what | Tier 1 24/7 support | Tier 2 Proactive monitoring | Tier 3 Managed, your infrastructure | Tier 4 Fully managed by AceMQ |
|---|---|---|---|---|
| Who runs AWS Lambda day to day? | Your team | Your team, with AceMQ reviews | AceMQ | AceMQ |
| Where does it run? | Your infrastructure | Your infrastructure | Your cloud account or data centre | AceMQ infrastructure |
| 24/7 incident response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response |
| Health checks and CVE alerts | On request | Scheduled | Included | Included |
| Patching and upgrades | Your team, AceMQ advises | Planned with AceMQ | Done by AceMQ | Done by AceMQ |
| Monitoring and on-call | Your team | Your team | AceMQ | AceMQ |
| Data, keys and accounts | Yours | Yours | Yours | Your data, hosted by AceMQ |
Every Tier can start as an ad hoc engagement or an annual partnership, and you can move up or down a Tier as your team changes.
One partner for AWS Lambda
Support is one part of what AceMQ does for AWS Lambda. The same engineers deliver consulting, health checks, migrations and end-of-life cover, and support the systems that usually run next to it.
Our Lambda support covers 24/7 emergency incident response with a 15-minute SLA, root cause analysis on every P1, cold start and latency tuning, event source and integration design, concurrency and throttling management, IAM and VPC review, and cost governance. Every ticket is handled by a named senior engineer assigned to your account — there is no tier-1 triage layer and no per-incident charge.
AWS supports the Lambda service. We support what you built on it. Handler code, event source configuration, batch and visibility settings, concurrency allocation across your account, IAM policy design, cost profile, and the downstream systems your functions call are all outside AWS's boundary and inside ours. The two are complementary — we frequently help customers prepare a clean, evidenced case for AWS support when an issue genuinely is on their side.
Because unreserved concurrency is a single account-and-region pool shared by every function. A batch job, a replay, or a retry storm elsewhere in the account consumes that pool and throttles functions that never changed. The fix is usually reserved concurrency on the critical paths to guarantee them capacity, plus a limit on the noisy function so it cannot take the whole budget — followed by a quota increase only if the total is genuinely too low.
The most common cause is queue visibility timeout set at or below the function timeout, so the message becomes visible again while the invocation is still running and a second invocation picks it up. The second cause is a handler that throws after doing its side effect, sending the whole batch back for redelivery — which is why partial batch failure reporting and idempotent handlers matter. We check the timeout relationship first because it is a one-line fix.
Sometimes, and it is often the expensive answer to a cheap problem. We profile the init phase first: heavy top-level imports, oversized deployment packages, and SDK clients built at module scope typically account for most of the init duration and can be cut without paying for warm capacity. Where latency requirements genuinely demand it we configure provisioned concurrency or SnapStart, sized against real traffic patterns rather than peak.
That is the usual case and where we are strongest. Lambda functions sit between queues, streams, brokers, and databases, and most incidents are really about ordering, backpressure, poison messages, retries, or connection pool exhaustion downstream. Enterprise messaging is our core discipline, so we work the whole path rather than stopping at the function boundary.
Yes. AceMQ works on AWS Lambda in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.
Every AceMQ proposal is tailored to your requirements: your AWS Lambda environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how AWS Lambda is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.
Let's talk
Reactive cover, proactive reviews, or AceMQ running AWS Lambda for you on your infrastructure or ours. A senior engineer scopes it with you, and quote requests are answered within 1 hour.
Production incident right now?Email an AWS Lambda Architect
Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.
305-204-2607info@acemq.comPrefer to talk now? Call us directly or use the consultation tab to find a time that works.