Skip to content
Quest 17Advanced25 min

Elite Four Production Review

A correct API call is not yet a production system. In this final design review, you will connect DynamoDB's data model to traffic shape, consistency, recovery, security, event processing, and operations.
Start the lesson

What you'll learn

  • Capacity mode does not fix a hot key; distribute high-volume writes across well-chosen partition key values.
  • Eventually consistent reads are the default; request strong consistency only for base-table or LSI reads that truly require it.
  • Streams, backups, encryption, alarms, and restore drills are part of the design—not post-launch extras.

Section 01

Choose your global table consistency mode

MREC is the default: writes replicate asynchronously and concurrent changes use last-writer-wins reconciliation. Transactions are atomic in the originating Region, not across replicas.

MRSC synchronously replicates writes and supports strongly consistent reads across replicas. It currently does not support TTL or transaction APIs. GSIs remain eventually consistent. These tradeoffs matter more than simply enabling a global table.

The lab chooses MREC to retain TTL and regional transactions. Its productionPlan is a teaching checklist, not an AWS SDK input object.

Section 02

Scale and consistency

On-demand capacity is a strong default for unknown or spiky traffic, while provisioned capacity can be economical for predictable loads. Both modes still depend on well-distributed partition keys. A hot battle feed may need deterministic write sharding such as BATTLE#2026-07-17#03 and a fan-out read across shards.

DynamoDB read cost depends on item size and consistency. Prefer eventual reads where the application tolerates slight lag; use strong reads deliberately. GSI and Streams reads are eventually consistent, so workflows must tolerate propagation delay.

Section 03

Events, regions, and recovery

  • Use DynamoDB Streams for change-data capture. Each change appears exactly once in the stream (ordered per item), but consumers such as Lambda retry failed batches, so processing must be idempotent.
  • Global tables offer MREC (eventual replication with last-writer-wins conflict resolution) and MRSC (strong reads across replicas when requested). Choose explicitly and check supported Regions before deployment.
  • Enable point-in-time recovery with a 1–35 day recovery period; restores create a new table. Regularly test restoration and application cutover.
  • Keep objects approaching DynamoDB's 400 KB item limit in S3 and store only metadata and an object key in DynamoDB.

Section 04

Security and operations

DynamoDB always encrypts data at rest; choose the KMS key type (AWS owned, AWS managed, or customer managed) your compliance needs, use TLS in transit, and grant least-privilege IAM permissions scoped to the required tables, indexes, actions, and leading keys where possible.

  • Monitor throttled requests, system errors, latency, consumed capacity, and account/table limits.
  • Load-test real access patterns and item sizes; averages hide the hot keys that fail first.
  • Document retry policy with exponential backoff and jitter, idempotency strategy, cost budget, and regional failure behavior.
  • Use DAX only after measuring a read-heavy, eventually consistent cacheable workload; it does not repair a poor key design.

Practice

Your turn

The Elite Four will not approve a design that only works on a laptop. Complete the production review with explicit choices for unpredictable traffic, normal read consistency, write distribution, change capture, recovery, encryption, large payloads, multi-Region replication, and alarms.
Choose on-demand capacity, eventual reads by default, at least four write shards, NEW_AND_OLD_IMAGES Streams, PITR, KMS encryption, S3 for large objects, Global Tables in MREC mode, and throttling/error/latency alarms.
Tab inserts two spaces. Press Escape, then Tab, to leave the editor. Control or Command plus Enter runs the code.
Simulated — no AWS calls

Check

Check your understanding

Quick Quiz · one question, as many tries as you need.

Which statement is the strongest production review conclusion?

Choose one answer.