The DynamoDB alarm hit at 2:13 a.m. and no one knew why.
By the time the on-call engineered stumbled through dashboards, logs, and metrics, the cost had spiked, queries had slowed, and guesswork had taken over. This is the price of missing proper anomaly detection and query runbooks