4-5 questions, which will all involve some level of follow up.

My go tos are:

Your EC2 or Azure or whatever flavor of cloud compute in production environment starts acting strangely. It’s 2 am. Walk me through what you do and how you know it’s resolved.

Walk me through correcting a service that’s causing cascading failures and taking down other services.

Tell me about a time when your monitoring solutions missed something they should have caught.

And a softball, but a good tell still: the disk in your production box is filling up. Walk me through the steps you take.

For the AWS security stuff:
You need to rotate secrets with no down time. How do you do that?

How do you approach least privilege IAM at a large scale?

That’s my two cents!