Incident: Work that timed out faster than it finished
Module 15 · Incident file · About 35 minutes
What happened
On 19 and 20 October 2025, Amazon Web Services had a long disruption in its N. Virginia (us-east-1) Region. AWS's own post-event summary, "Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region", describes it. The trigger, at 11:48 PM PDT, was "a latent race condition in the DynamoDB DNS management system" that left an empty DNS record for DynamoDB's regional endpoint. DNS was restored by 2:25 AM.
This file is about what happened next, inside EC2. A subsystem called DropletWorkflow Manager (DWFM) keeps a lease on each physical server ("droplet"), checked every few minutes. Those checks depend on DynamoDB, so leases "slowly started to time out". At 2:25 AM, with DynamoDB back, DWFM began to re-establish leases across the EC2 fleet.
The summary says: "due to the large number of droplets, efforts to establish new droplet leases took long enough that the work could not be completed before they timed out. Additional work was queued to reattempt establishing the droplet lease." DWFM "had entered a state of congestive collapse and was unable to make forward progress". There was "no established operational recovery procedure". At 4:14 AM engineers "throttled incoming work and began selective restarts of DWFM hosts"; by 5:28 AM all leases were back. The summary dates failed new instance launches from 2:25 AM to 10:36 AM, partly from later backlogs elsewhere, and full EC2 recovery to 1:50 PM. AWS writes that the event "impacted many customers in significant ways"; it gives no money figure, and neither does this file.