Obligatory reminder that if this kind of "X hour downtime per year" is such a big problem for your business you can go multi-AZ and multi-region. If you choose

Obligatory reminder that if this kind of "X hour downtime per year" is such a big problem for your business you can go multi-AZ and multi-region. If you choose not to, that's a valid and often the right choice but then don't panic and scream when something fails. It's a trade-off decision that you have to make. You can't have your cake and eat it too. Either you care enough to design, build, and test that kind of fault tolerance or you don't. If you do you get its benefits during these times. If you don't then just own it and put up with the downtimes a few times per year.