Given your response - I don't understand why you would then make the statement about Chaos Monkey. It also appears that your earlier statement appears to be fa

Given your response - I don't understand why you would then make the statement about Chaos Monkey. It also appears that your earlier statement appears to be false: "We do not waste any time "architecting for failure"". If you can pull the plug on a server and not lose service, you certainly have architected for failure. Chaos Monkey does effectively exactly what you claim to be able to survive - it unplugs servers. The fact that it runs on AWS is inmaterial, it exists to make sure you really can survive a server disappearing. The underlying point is that many teams build their software to survive server failures and never test the fail-over till it occurs for real, that often goes very badly. Chaos Monkey tests fail-over on a regular basis so you find out about it before it costs you hours of downtime.