> It's good to exercise the "everything is down/recover from zero" path now and then. Yes! The more often the better. Over the years I've been at AWS, we've

> It's good to exercise the "everything is down/recover from zero" path now and then. Yes! The more often the better. Over the years I've been at AWS, we've focused more and more on building systems with relatively small internal partitions ("cells"). There are several reasons for this---the most important being reducing the "blast radius" of outages. One often-overlooked reason is that building out of smaller independent units allows units small enough to be economically turned off and on at "full scale". You can't do that with a region-scale deployment of any big AWS service, but may be able to with a "cell".