{
  "source_file": "0930",
  "source_platform": "Medium",
  "author": "Ibrahim Salami",
  "title_listed": "I Deployed My Data Pipeline to AWS. Then Everything That Was \"Local\" Broke.",
  "keywords": "",
  "domain": "数据处理",
  "content_type": "深度技术解析",
  "is_paid_flag": "否",
  "url": "https://towardsdatascience.com/i-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke/",
  "publish_date": "2026-08-25",
  "corpus_stage": "",
  "notes": "",
  "id": "70df1b9b832d",
  "collected_at": "2026-10-02T11:24:07",
  "title": "I Deployed My Data Pipeline to AWS. Then Everything That Was “Local” Broke. | Towards Data Science",
  "body_markdown": "![Revisit consent button](../images/body-df29beacd7496220cc94.svg)\nWe value your privacy\nWe use cookies to enhance your browsing experience, serve personalised ads or content, and analyse our traffic. By clicking \"Accept All\", you consent to our use of cookies.\nCustomise Reject All Accept All\nCustomise Consent Preferences ![](../images/body-2159bb67f3de8ad870eb.svg)\nWe use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.\nThe cookies that are categorised as \"Necessary\" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... Show more\nNecessaryAlways Active\nNecessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.\n  * Cookie\nBCTempID\n  * Duration\n10 minutes\n  * Description\nNo description available.\n\n\n  * Cookie\n__cf_bm\n  * Duration\n1 hour\n  * Description\nThis cookie, set by Cloudflare, is used to support Cloudflare Bot Management. \n\n\n  * Cookie\nAWSALBCORS\n  * Duration\n7 days\n  * Description\nAmazon Web Services set this cookie for load balancing.\n\n\n  * Cookie\n_cfuvid\n  * Duration\nsession\n  * Description\nCloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services\n\n\n  * Cookie\nli_gc\n  * Duration\n6 months\n  * Description\nLinkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.\n\n\n  * Cookie\n__hssrc\n  * Duration\nsession\n  * Description\nThis cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session.\n\n\n  * Cookie\n__hssc\n  * Duration\n1 hour\n  * Description\nHubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.\n\n\n  * Cookie\nwpEmojiSettingsSupports\n  * Duration\nsession\n  * Description\nWordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user's browser can display emojis properly.\n\n\n  * Cookie\nBCSessionID\n  * Duration\n1 year 1 month 4 days\n  * Description\nBlueconic sets this cookie as a unique identifier for the BlueConic profile.\n\n\n  * Cookie\n_octo\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\nlogged_in\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\n__Secure-YEC\n  * Duration\npast\n  * Description\nYouTube sets this cookie to stores the user's video player preferences using embedded YouTube video\n\n\n  * Cookie\n__eoi\n  * Duration\n6 months\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nAWSALBTGCORS\n  * Duration\n7 days\n  * Description\nNo description available.\n\n\n  * Cookie\nlogin-status-p\n  * Duration\npast\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nAWSALBTG\n  * Duration\n7 days\n  * Description\nNo description available.\n\n\n  * Cookie\ncsrf_token\n  * Duration\nsession\n  * Description\nNo description available.\n\n\n  * Cookie\ntoken_v2\n  * Duration\n1 day\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nD\n  * Duration\n1 year\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nPHPSESSID\n  * Duration\nsession\n  * Description\nThis cookie is native to PHP applications. The cookie stores and identifies a user's unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.\n\n\n  * Cookie\nVISITOR_PRIVACY_METADATA\n  * Duration\n6 months\n  * Description\nYouTube sets this cookie to store the user's cookie consent state for the current domain. \n\n\n  * Cookie\ncookietest\n  * Duration\nsession\n  * Description\nThe cookietest cookie is typically used to determine whether the user's browser accepts cookies, essential for website functionality and user experience.\n\n\n  * Cookie\n__Host-airtable-session\n  * Duration\n1 year\n  * Description\nThis cookie is used to enable us to integrate the services of Airtable.\n\n\n  * Cookie\n__Host-airtable-session.sig\n  * Duration\n1 year\n  * Description\nThis cookie is used to enable us to integrate the services of Airtable.\n\n\n  * Cookie\nm\n  * Duration\n1 year 1 month 4 days\n  * Description\nStripe sets this cookie for fraud prevention purposes. It identifies the device used to access the website, allowing the website to be formatted accordingly.\n\n\n  * Cookie\nBIGipServer*\n  * Duration\nsession\n  * Description\nMarketo sets this cookie to collect information about the user's online activity and build a profile about their interests to provide advertisements relevant to the user. \n\n\n  * Cookie\n__cfruid\n  * Duration\nsession\n  * Description\nCloudflare sets this cookie to identify trusted web traffic.\n\n\n  * Cookie\n_GRECAPTCHA\n  * Duration\n6 months\n  * Description\nGoogle Recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks.\n\n\n  * Cookie\n__Secure-YNID\n  * Duration\n6 months\n  * Description\nGoogle cookie used to protect user security and prevent fraud, especially during the login process.\n\n\n  * Cookie\ncookieyes-consent\n  * Duration\n1 year\n  * Description\nCookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.\n\n\nFunctional\nFunctional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.\n  * Cookie\nlidc\n  * Duration\n1 day\n  * Description\nLinkedIn sets the lidc cookie to facilitate data center selection.\n\n\n  * Cookie\nbrw\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\nbrwConsent\n  * Duration\n5 minutes\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nWMF-Uniq\n  * Duration\n1 year\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nloom_anon_comment\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\nloom_referral_video\n  * Duration\nsession\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nVISITOR_INFO1_LIVE\n  * Duration\n6 months\n  * Description\nA cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.\n\n\n  * Cookie\nyt-remote-connected-devices\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to store the user's video preferences using embedded YouTube videos.\n\n\n  * Cookie\nytidb::LAST_RESULT_ENTRY_KEY\n  * Duration\nNever Expires\n  * Description\nThe cookie ytidb::LAST_RESULT_ENTRY_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future.\n\n\n  * Cookie\nyt-remote-device-id\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to store the user's video preferences using embedded YouTube videos.\n\n\n  * Cookie\nyt-remote-session-name\n  * Duration\nsession\n  * Description\nThe yt-remote-session-name cookie is used by YouTube to store the user's video player preferences using embedded YouTube video.\n\n\n  * Cookie\nyt-remote-fast-check-period\n  * Duration\nsession\n  * Description\nThe yt-remote-fast-check-period cookie is used by YouTube to store the user's video player preferences for embedded YouTube videos.\n\n\n  * Cookie\nyt-remote-session-app\n  * Duration\nsession\n  * Description\nThe yt-remote-session-app cookie is used by YouTube to store user preferences and information about the interface of the embedded YouTube video player.\n\n\n  * Cookie\nyt-remote-cast-available\n  * Duration\nsession\n  * Description\nThe yt-remote-cast-available cookie is used to store the user's preferences regarding whether casting is available on their YouTube video player.\n\n\n  * Cookie\nyt-remote-cast-installed\n  * Duration\nsession\n  * Description\nThe yt-remote-cast-installed cookie is used to store the user's video player preferences using embedded YouTube video.\n\n\n  * Cookie\ncp_session\n  * Duration\n3 months\n  * Description\nCodepen sets this cookie for Help systems found in the website.\n\n\n  * Cookie\nloid\n  * Duration\n1 year 1 month 4 days\n  * Description\nThis cookie is set by the Reddit. The cookie enables the sharing of content from the website onto the social media platform.\n\n\nAnalytics\nAnalytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.\n  * Cookie\n__hstc\n  * Duration\n6 months\n  * Description\nHubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).\n\n\n  * Cookie\nhubspotutk\n  * Duration\n6 months\n  * Description\nHubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.\n\n\n  * Cookie\n_ga\n  * Duration\n1 year 1 month 4 days\n  * Description\nGoogle Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.\n\n\n  * Cookie\n_ga_*\n  * Duration\n1 year 1 month 4 days\n  * Description\nGoogle Analytics sets this cookie to store and count page views.\n\n\n  * Cookie\n__Host-psifi.analyticsTrace\n  * Duration\n6 hours\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\n__Host-psifi.analyticsTraceV2\n  * Duration\n6 hours\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\n_gh_sess\n  * Duration\nsession\n  * Description\nGitHub sets this cookie for temporary application and framework state between pages like what step the user is on in a multiple step form.\n\n\n  * Cookie\nYSC\n  * Duration\nsession\n  * Description\nYSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.\n\n\n  * Cookie\najs_anonymous_id\n  * Duration\n1 year\n  * Description\nThis cookie is set by Segment to count the number of people who visit a certain site by tracking if they have visited before.\n\n\n  * Cookie\nvuid\n  * Duration\n1 year 1 month 4 days\n  * Description\nVimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website. \n\n\nPerformance\nPerformance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.\n  * Cookie\nAWSALB\n  * Duration\n7 days\n  * Description\nAWSALB is an application load balancer cookie set by Amazon Web Services to map the session to the target.\n\n\n  * Cookie\nacq\n  * Duration\npast\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nacq.sig\n  * Duration\npast\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nptc\n  * Duration\n2 years\n  * Description\nNo description available.\n\n\nAdvertisement\nAdvertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.\n  * Cookie\nmuc_ads\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to collect user behaviour and interaction data to optimize the website.\n\n\n  * Cookie\nguest_id_marketing\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to identify and track the website visitor.\n\n\n  * Cookie\nguest_id_ads\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to identify and track the website visitor.\n\n\n  * Cookie\npersonalization_id\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to integrate and share features for social media and also store information about how the user uses the website, for tracking and targeting.\n\n\n  * Cookie\nguest_id\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to identify and track the website visitor. It registers if a user is signed in to the Twitter platform and collects information about ad preferences.\n\n\n  * Cookie\nbcookie\n  * Duration\n1 year\n  * Description\nLinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs.\n\n\n  * Cookie\n__Secure-ROLLOUT_TOKEN\n  * Duration\n6 months\n  * Description\nYouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment.\n\n\n  * Cookie\nyt.innertube::nextId\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.\n\n\n  * Cookie\nyt.innertube::requests\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.\n\n\n  * Cookie\nsession_tracker\n  * Duration\nsession\n  * Description\nThis cookie is set by the Reddit. This cookie is used to identify trusted web traffic. It also helps in adverstising on the website.\n\n\n  * Cookie\nedgebucket\n  * Duration\nsession\n  * Description\nReddit sets this cookie to save the information about a log-on Reddit user, for the purpose of advertisement recommendations and updating the content.\n\n\n  * Cookie\ndid\n  * Duration\n1 year\n  * Description\nArbor sets this cookie to show targeted ads to site visitors.This cookie expires after 2 months or 1 year.\n\n\nUncategorised\nOther uncategorised cookies are those that are being analysed and have not been classified into a category as yet.\nNo cookies to display.\nReject All Save My Preferences Accept All\nToggle Search[](https://towardsdatascience.com/)Toggle Mobile Navigation\n[](https://towardsdatascience.com/)\nPublish AI, ML & data-science insights to a global community of data professionals.\nSign in[Submit an Article](https://write.insightmediagroup.io)\n[Latest](https://towardsdatascience.com/latest/)[Editor's Picks](https://towardsdatascience.com/tag/editors-pick/)[Newsletter](https://towardsdatascience.com/tag/the-variable/)[ShipAI](https://towardsdatascience.com/shipai/)\n* * *\n[Write For TDS](https://towardsdatascience.com/submissions/)\n[LinkedIn](https://www.linkedin.com/company/towards-data-science/)[X](https://x.com/TDataScience)Toggle Search\n[Data Engineering](https://towardsdatascience.com/category/data-science/data-engineering/)\n# I Deployed My Data Pipeline to AWS. Then Everything That Was “Local” Broke.\nWhat moving a Dockerized pipeline off my laptop taught me about containers, networking, and hidden assumptions.\n[Ibrahim Salami](https://towardsdatascience.com/author/ibrahim.salami/)\nAugust 25, 202612 min read\n![](../images/000.jpg)\nGenerated with Gemini AI\nFor the past few months, I've been building a small data pipeline entirely on my Windows machine. RSS ingestion running in WSL2, Postgres in Docker, Kestra orchestrating the whole thing, dbt transforming the data on top. Every piece worked. I had a working lineage graph, passing tests, a scheduled flow that fetched articles and saved them to a database.\nIt all worked because it was all sitting in one place. My laptop.\nThis article is about what happened when I tried to move it off my laptop and onto a real server, using nothing but the CLI. I expected the hard part to be AWS itself: accounts, instances, networking. It wasn't. The hard part was everything I didn't know I'd built on top of \"it's all running on the same machine.\" That assumption was doing more work than I realized, and taking it away broke things one at a time, in ways that taught me more than the original build did.\n## Setting up the box\nGetting a server running was, honestly, the easy part.\nLearn this step by step with the interactive [Data Engineer](https://roadmap.sh/data-engineer) roadmap.\n> I created an AWS account on the newer $100-credit free tier, set up an IAM user for CLI work instead of using root (a small good habit that saved me from myself more than once), and launched a t3.small EC2 instance running Ubuntu 22.04.\nA few small surprises came up along the way. Nothing major, but enough to remind me that a cloud server isn't just my computer in a different location.\nThe default 8GB disk was too small before I'd even started. Resizing it meant running `growpart `and `resize2fs`, and the instructions I found online kept referencing a device called `xvda`. My instance didn't have one. Newer instance types use the Nitro system, which names drives things like `nvme0n1` instead. Small naming difference, but it's the kind of thing that makes you doubt everything else you're about to type, since if the first command doesn't even find its target, what else is going to quietly not apply.\nI also saw the instance go “impaired” at one point while Kestra was pulling its Docker image for the first time. My best guess was that it had run out of memory. I added a 1GB swap file as a bit of extra breathing room, and it hasn’t happened since. Basically, it gives the system somewhere to offload memory when the RAM gets full, using disk space as a slower backup. It was a simple fix, but it was also my first reminder that a rented server doesn’t have quite the same headroom I’d gotten used to on my laptop.\nI attached an Elastic IP so the server's address wouldn't change every time I stopped and started it, and locked down the security group so only my own IP could reach ports 22 (SSH), 8080 (Kestra's UI), and 5432 (Postgres). That last part turned into its own minor recurring chore: my home internet doesn't give me a fixed IP address, so most sessions started with me re-authorizing whatever address I currently had before anything else would even load.\nNone of this was hard. It was just a lot of small, specific facts about this particular kind of computer that nothing in my local setup had ever forced me to learn.\n## Getting the pipeline over\nI installed Docker, brought over my project with `rsync` instead of `git`, since my repo is public and my `.env` file has real secrets in it, and ran `docker compose up -d`. Postgres came up healthy. Kestra came up too.\nOne thing caught me off guard here: Kestra's flows don't live in files that sync automatically when you copy a project over. They live inside Kestra's own internal database. My one flow, `fetch_rss`, simply didn't exist on the server until I pasted its YAML into the UI myself. It's a small thing, but it's the first hint of a pattern that showed up again and again during this whole process: things that felt like \"my project\" were actually split across two different kinds of state, files I own and copy around, and internal state that lives only inside the running system.\nI clicked Execute. It failed immediately.\n## The toolbox that wasn't there\nMy flow used a `Process` task runner for the actual work. It built the Python virtual environment, installed the dependencies, and ran my ETL script. That was exactly how I had it set up locally, and it had never caused me any problems.\nThe error was about a missing package: `python3.12-venv`. Digging in, I learned something I genuinely hadn't considered. The `Process `task runner doesn't run on the EC2 host. It runs inside Kestra's own container. Kestra's container had Python, but not the piece needed to build a virtual environment.\nI fixed it temporarily by running `apt-get install -y python3.12-venv` directly inside the container. It worked, but I knew it wouldn’t survive a restart because the change wasn’t part of the image itself. I’d fixed the immediate problem, but not the underlying setup.\nThis is where I had to make a real decision, and it's the first genuinely useful lesson from this whole project: **the manager and the worker shouldn't be the same thing.** Kestra's job is to decide when things run and keep track of them. It is not supposed to also be the thing building Python environments and installing packages by hand. Every time a task needed something new, I'd be rebuilding Kestra's own image to fit, which is a strange amount of responsibility to hand to your orchestrator.\nInstead of trying to keep patching Kestra itself, I moved the actual work out of it and switched the task to Kestra’s Docker task runner. The idea was pretty simple: Kestra would spin up a separate container just for the Python job, run the ETL script there, and get rid of the container when the job was done. It was closer to how I wanted the setup to work, although I was about to run into a few more complications.\n## Giving the manager a key it didn't know it needed\nFor Kestra to launch a separate worker container, it needs to be able to talk to Docker itself, the actual daemon managing containers on the host. The way you grant that is by mounting the Docker socket into Kestra's own container:\nyaml\n\n```\nkestra:\n  volumes:\n    - /var/run/docker.sock:/var/run/docker.sock\n```\n\nThis is worth sitting with for a second, because it's not a neutral decision. Anything with access to that socket can effectively ask Docker to do anything on the host, including spinning up containers with far more access than they should have. Locally, on my own laptop, this never registered as a real tradeoff. On a machine sitting on the open internet, it's a genuine one. I decided it was acceptable for a learning project running a single low-stakes flow, but it's exactly the kind of decision that deserves to be made on purpose, not discovered by accident three steps into a debugging session.\nWith the socket mounted, I updated the flow to use the Docker task runner and pointed it at a `python:3.12-slim` image. First real test: `Permission denied`.\nTurned out the socket being mounted wasn't enough. Kestra's own process inside the container wasn't running as root, and that particular door only opens for root. Having the key isn't the same as being allowed to use it. \nAdding `user: \"0:0\"` to Kestra's service definition fixed it, though not before I spent a confusing round-trip discovering that Docker Compose doesn't always rebuild a container just because you changed a line in the file. `docker compose up -d --force-recreate kestra` was the command that actually made the change take effect. `up -d` alone quietly decided nothing important had changed.\n## The volume that wasn't really there\nWith permissions sorted, the flow ran further, and hit a new wall: `Could not open requirements file: No such file or directory.`\nI'd mounted my project folder into the worker container so it could see the script and its dependencies. I could prove the mount worked by running the exact same `docker run` command by hand, outside of Kestra, and it worked perfectly. Whatever Kestra was doing, it wasn't the same thing.\nThis ended up being the longest detour in the whole project, and honestly, probably the one that annoyed me the most in hindsight. The worst part was how quietly it failed. I first tried a setting called `volume-enabled`, but I had it in the wrong part of the config. Then I tried again with the correct property name, `volumeEnabled`—no dash—and put it in the right place, under `plugins.configurations`, targeting the Docker task runner plugin by its full class name. Still nothing.\nNo error. No warning. Nothing. It just kept silently ignoring the setting.\nEventually, I found the real explanation: host-folder mounting for the Docker task runner appears to require Kestra’s Enterprise edition. I’d been chasing a setting that simply doesn’t work on the free tier I’m using. It wasn’t a typo or a misconfiguration. I was basically trying to open a door that I didn’t even know was locked. The frustrating part was that Kestra never made that clear—it just quietly ignored the setting and left me wondering what I was doing wrong.\n> I want to flag this specifically for anyone following a similar path: when a setting appears to do nothing no matter how correctly you write it, stop assuming you have the syntax wrong. Check whether the feature exists in the edition you're actually running.\n## The way that's actually meant to work\nThe fix wasn't to force the mount to work. It was to stop trying to mount anything at all.\nKestra has a feature called Namespace Files, essentially a small file store that lives inside Kestra itself. You upload your project's files into it once, and Kestra hands them to worker containers automatically at runtime, no host folder access required. It's the fully-supported version of what I was trying to hack together with volumes.\nUploading them from the server turned into its own small chain of mistakes, which by this point in the day felt almost expected. I tried a `PUT `request first; Kestra wanted a `POST `with the file wrapped as multipart form data. I got that right and got back silence, no confirmation, no error, which I initially read as success. It wasn't. \nA `curl -i` flag to actually show me the response headers revealed the real problem: `401 Unauthorized.` Basic auth had been on the whole time, my browser just never told me because it was already logged in. `curl` has no memory like that. Adding `-u username:password` to every request fixed it.\nOnce the files were uploading, I made a habit of checking each one immediately after, since one early batch attempt had somehow paired the wrong file sizes with the wrong filenames. Slower, but it meant every mismatch got caught the moment it happened instead of surfacing three steps later as a mysterious script error.\nWith all six files confirmed correct, I rewrote the flow to use `namespaceFiles: enabled: true` instead of a volume mount, and switched the file paths from absolute (`/workspace/python/...`) to relative (`python/...`), since Namespace Files land directly in the container's working directory rather than wherever I'd been mounting things.\nThis time, it actually ran the script. Fetched 25 articles. Parsed them. And then:\ntext\n\n```\npsycopg.OperationalError: connection failed: connection to server at \"127.0.0.1\", port 5432 failed: Connection refused\n```\n\n## The last assumption: localhost isn't a place\nThis was the smallest fix of the whole day, and also the most honest one, in the sense that it exposed an assumption I'd never had reason to question before.\nMy database config had `DB_HOST=localhost` by default. And locally, that was perfectly fine. Everything was running on the same machine, so saying “the database is right here” was actually true.\nBut on AWS, Kestra’s worker was running in its own separate container. So when it tried to connect to `localhost`, it was basically looking inside its own little container and saying, “Where’s the database?” Postgres was sitting in a different container, one that it could reach through the shared Docker network using the service name `postgres` instead.\nI passed the real connection details into the worker container as environment variables, matching them against the container network we'd set up earlier (`networkMode: rss-pipeline_default`, the same network Postgres and Kestra already shared), and the pipeline finally ran start to finish. Fetched articles, saved them, done.\nThe very last thing I fixed, immediately after, was the password sitting in plain text in that same config. Kestra has a KV store built for exactly this, a place to store a value once and reference it from the flow (`{{ kv('DB_PASSWORD') }}`) instead of writing it out anywhere. Small thing, but it felt like the right note to end on: getting something working and then immediately asking whether the way it's working is one I'd be comfortable with someone else seeing.\n## What actually broke, and why it matters\nZooming out, every single failure in this process traced back to one of two things:\n### Things That Worked Locally but Broke Across Containers\n_“The database is on localhost”, “The Python environment I set up by hand is still here.”_. Locally, being on the same machine does a lot of invisible work for you. You don’t think of those things as requirements because you never had to. They’re just there, and everything works. Once you move to separate containers, those assumptions disappear, and suddenly you realize how much you were relying on them without even noticing.\n### Things That Failed Silently Instead of Loudly. \nA mistyped config property. A feature that doesn't exist in the tier you're running. An unauthenticated request that returns nothing instead of an error. None of these crashed anything. They just quietly did less than I asked, which is a much harder thing to debug than an actual crash, because there's no stack trace pointing at the gap. You just have to notice that something didn't happen.\nIf I had to compress this into one piece of advice for someone doing this for the first time: when something you built locally moves to a real server, treat every assumption about \"things being in the same place\" as a claim you need to re-prove, not a fact you get to keep. And when a fix seems to do nothing at all, however many times you double check the syntax, consider that it might genuinely be doing nothing, because the feature isn't available to you in the first place.\n## What's Next\nThe pipeline itself is done, running, and actually saving real data to a cloud database. That was the goal for this piece, and it's genuinely satisfying to type that sentence after the day I just had.\nI've been going back and forth on what comes after this. Part of me wants to finish the full loop, connect `rss-transform`, my dbt project, to this new cloud database, and close out the RSS pipeline as one complete, end-to-end story from raw feed to clean, tested data. There's something appealing about that kind of closure.\nBut if I'm honest, this project has already taught me most of what it set out to teach me. I went from \"what even is a Docker container\" to debugging Docker socket permissions, silent config failures, and container networking, on a real server, with real consequences when I got something wrong. That was the whole point of picking this project in the first place, and at some point, squeezing more lessons out of the same pipeline starts to feel like staying somewhere past when I've actually outgrown it.\nSo I'm genuinely undecided, and I think that's an honest place to leave this piece. Maybe the next article is the dbt-to-cloud connection, wrapping this series up properly. Maybe it's something completely new, a fresh project, a different set of skills, a reason to feel like a beginner again in a new way. I don't know yet, and I'd rather say that plainly than manufacture a tidy roadmap I'm not actually committed to.\nEither way, I'll be documenting it the same way I documented this: honestly, mistakes included.\n_This is part of my ongoing series documenting my transition from systems analyst to data engineer. If you’ve been following along, thank you._\n_Connect with me on_[ _LinkedIn_](https://www.linkedin.com/in/ibrahim-salami-059863228/) _,_[_YouTube_](https://www.youtube.com/@ibbysalam) _, and_[ _Twitter_](https://x.com/IbbySalam) _._\n## Register Now to Continue Reading\n### Unlock Towards Data Science with a Free Account\nAll articles on Towards Data Science are available to registered users. Create a free account today to access this article and thousands more.\nRegister for freeSign in to your account\n* * *\n![](../images/body-542334df68a32cd56c4a.jpeg)\nWritten By\n## [Ibrahim Salami](https://towardsdatascience.com/author/ibrahim.salami/)\n[See all from Ibrahim Salami](https://towardsdatascience.com/author/ibrahim.salami/)\n[AWS](https://towardsdatascience.com/tag/aws/)[Data Pipeline](https://towardsdatascience.com/tag/data-pipeline/)[Data Science](https://towardsdatascience.com/tag/data-science/)[Docker](https://towardsdatascience.com/tag/docker/)[Programming](https://towardsdatascience.com/tag/programming/)\nShare This Article\n  * [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F&title=I%20Deployed%20My%20Data%20Pipeline%20to%20AWS.%20Then%20Everything%20That%20Was%20%E2%80%9CLocal%E2%80%9D%20Broke.)\n  * [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F&title=I%20Deployed%20My%20Data%20Pipeline%20to%20AWS.%20Then%20Everything%20That%20Was%20%E2%80%9CLocal%E2%80%9D%20Broke.)\n  * [](https://x.com/share?url=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F&text=I%20Deployed%20My%20Data%20Pipeline%20to%20AWS.%20Then%20Everything%20That%20Was%20%E2%80%9CLocal%E2%80%9D%20Broke.)\n\n\nTowards Data Science is a community publication. Submit your insights to reach our global audience and earn through the TDS Author Payment Program.\n[Write for TDS](https://towardsdatascience.com/submissions/)\n## Related Articles\n  * [![](../images/001.jpg)](https://towardsdatascience.com/create-your-custom-python-package-that-you-can-pip-install-from-your-git-repository-f90465867893/)\n## [Create Your Custom, private Python Package That You Can PIP Install From Your Git Repository](https://towardsdatascience.com/create-your-custom-python-package-that-you-can-pip-install-from-your-git-repository-f90465867893/)\n[Programming](https://towardsdatascience.com/category/programming/)\nShare your self-built Python package using your git repo.\n[Mike Huls](https://towardsdatascience.com/author/mikehuls/)\nJuly 3, 20216 min read\n  * [![](../images/002.jpeg)](https://towardsdatascience.com/an-intuitive-guide-to-lstms-e26f06273ad3/)\n## [An Intuitive Guide to LSTMs](https://towardsdatascience.com/an-intuitive-guide-to-lstms-e26f06273ad3/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nby creating them from scratch\n[Victor Sim](https://towardsdatascience.com/author/victorsim14/)\nSeptember 27, 20207 min read\n  * [![](../images/003.jpg)](https://towardsdatascience.com/stratified-sampling-you-may-have-been-splitting-your-dataset-all-wrong-8cfdd0d32502/)\n## [Stratified Sampling: You May Have Been Splitting Your Dataset All Wrong](https://towardsdatascience.com/stratified-sampling-you-may-have-been-splitting-your-dataset-all-wrong-8cfdd0d32502/)\n[Deep Learning](https://towardsdatascience.com/category/artificial-intelligence/deep-learning/)\nRandomly generating splits of the data set is not always the optimal solution, as the proportions in the target variable can be extremely...\n[Angel Igareta](https://towardsdatascience.com/author/angeligareta/)\nJuly 21, 20213 min read\n  * [![](../images/004.jpeg)](https://towardsdatascience.com/3-bitter-lessons-i-wish-i-knew-earlier-as-a-big-data-engineer-e2956bcc7b29/)\n## [3 Bitter Lessons I Wish I Knew Earlier As a Big Data Engineer](https://towardsdatascience.com/3-bitter-lessons-i-wish-i-knew-earlier-as-a-big-data-engineer-e2956bcc7b29/)\n[Data Science](https://towardsdatascience.com/category/data-science/)\nThe Dos and Don'ts of data engineering\n[Nam Nguyen](https://towardsdatascience.com/author/namnguyenwrite/)\nAugust 6, 20216 min read\n  * [![](../images/005.jpg)](https://towardsdatascience.com/5-r-objects-you-should-learn-to-master-r-programming-685341ce6661/)\n## [5 R Objects You Should Learn to Master R Programming](https://towardsdatascience.com/5-r-objects-you-should-learn-to-master-r-programming-685341ce6661/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nR is a really flexible language - here, we are going to learn the objects that will power up your R Data Analytics and Science scripts\n[Ivo Bernardo](https://towardsdatascience.com/author/ivopbernardo/)\nOctober 29, 20216 min read\n  * [![](../images/006.png)](https://towardsdatascience.com/introducing-server-sent-events-in-python/)\n## [Introducing Server-Sent Events in Python](https://towardsdatascience.com/introducing-server-sent-events-in-python/)\n[Programming](https://towardsdatascience.com/category/programming/)\nA simpler path to coding real-time web applications\n[Thomas Reid](https://towardsdatascience.com/author/thomas_reid/)\nAugust 4, 202512 min read\n  * [![](../images/007.jpeg)](https://towardsdatascience.com/make-a-mock-real-time-stream-of-data-with-python-and-kafka-7e5e23123582/)\n## [Make a mock \"real-time\" stream of data with Python and Kafka](https://towardsdatascience.com/make-a-mock-real-time-stream-of-data-with-python-and-kafka-7e5e23123582/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nEverything you need to turn a .csv file of timestamped data into a Kafka stream with Python and Docker\n[Maria Patterson](https://towardsdatascience.com/author/maria-patterson/)\nAugust 29, 20215 min read\n  * [![](../images/body-63beb50f664a055ed739.jpg)](https://towardsdatascience.com/latest-picks-meta-policy-gradients-a-survey-9fc11033006a/)\n## [Latest picks: Meta-Policy Gradients: A Survey](https://towardsdatascience.com/latest-picks-meta-policy-gradients-a-survey-9fc11033006a/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nYour daily dose of data science\n[TDS Editors](https://towardsdatascience.com/author/towardsdatascience/)\nJanuary 4, 20211 min read\n  * [![](../images/009.png)](https://towardsdatascience.com/from-dataslows-to-dataflows-the-gen2-performance-revolution-in-microsoft-fabric/)\n## [From ‘Dataslows’ to Dataflows: The Gen2 Performance Revolution in Microsoft Fabric](https://towardsdatascience.com/from-dataslows-to-dataflows-the-gen2-performance-revolution-in-microsoft-fabric/)\n[Data Engineering](https://towardsdatascience.com/category/data-science/data-engineering/)\nHow the latest Dataflow enhancements change the way we play the game\n[Nikola Ilic](https://towardsdatascience.com/author/datamozart/)\nJanuary 13, 20268 min read\n\n\n  * [YouTube](https://www.youtube.com/c/TowardsDataScience)\n  * [X](https://x.com/TDataScience)\n  * [LinkedIn](https://www.linkedin.com/company/towards-data-science/)\n  * [Threads](https://www.threads.net/@towardsdatascience)\n  * [Bluesky](https://bsky.app/profile/towardsdatascience.com)\n\n\n[](https://towardsdatascience.com/)\nYour home for data science and AI. The world's leading publication for data science, data analytics, data engineering, machine learning, and artificial intelligence professionals.\nSubscribe to Our Newsletter[Write For TDS](https://towardsdatascience.com/submissions/)•[About](https://towardsdatascience.com/about-towards-data-science-d691af11cc2f/)•[Advertise](https://contact.towardsdatascience.com/advertise-with-towards-data-science)•[Privacy Policy](https://towardsdatascience.com/privacy-policy/)•[Terms of Use](https://towardsdatascience.com/website-terms-of-use/)\n© Insight Media Group, LLC 2026•[The New Stack](https://thenewstack.io)•[roadmap.sh](https://roadmap.sh)•[Creator Network](https://insightmediagroup.io/creator-network)\n####  Recommended Articles \nClose\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607639/image?etag=1781250125848&width=500&height=500) Javascript Fatigue: HTMX Is All You Need to Build ChatGPT — Part 1 ](https://towardsdatascience.com/javascript-fatigue-you-dont-need-js-to-build-chatgpt/ \"Javascript Fatigue: HTMX Is All You Need to Build ChatGPT — Part 1\")\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607930/image?etag=1782124566054&width=500&height=500) The Subset Sum Problem Solved in Linear Time for Dense Enough Inputs ](https://towardsdatascience.com/subset-sum-problem-solved-in-linear-time-for-dense-enough-inputs/ \"The Subset Sum Problem Solved in Linear Time for Dense Enough Inputs\")\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/3660/image?etag=1780176246070&width=500&height=500) Does Your Company Have a Data Strategy? ](https://towardsdatascience.com/does-your-company-have-a-data-strategy-e8944dbec4ae/ \"Does Your Company Have a Data Strategy?\")\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/4970/image?etag=1780565225463&width=500&height=500) Productivity Tips, Data Career Insights, and Other Recent Must-Reads ](https://towardsdatascience.com/productivity-tips-data-career-insights-and-other-recent-must-reads-5c47eb7a2fe0/ \"Productivity Tips, Data Career Insights, and Other Recent Must-Reads\")\n\n\n",
  "metadata": {
    "title": "I Deployed My Data Pipeline to AWS. Then Everything That Was “Local” Broke. | Towards Data Science",
    "description": "What moving a Dockerized pipeline off my laptop taught me about containers, networking, and hidden assumptions.",
    "keywords": null,
    "author": "Ibrahim Salami",
    "og:locale": "en_US",
    "og:type": "article",
    "og:title": "I Deployed My Data Pipeline to AWS. Then Everything That Was “Local” Broke.",
    "og:description": "What moving a Dockerized pipeline off my laptop taught me about containers, networking, and hidden assumptions.",
    "og:url": "https://towardsdatascience.com/i-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke/",
    "og:site_name": "Towards Data Science",
    "og:image": "https://assets.insightmediagroup.io/media/wp-content/uploads/2026/08/local-to-AWS.jpg",
    "og:image:width": "985",
    "og:image:height": "537",
    "og:image:type": "image/jpeg",
    "twitter:card": "summary_large_image",
    "twitter:site": "@TDataScience",
    "twitter:creator": "@TDataScience",
    "twitter:label1": "Written by",
    "twitter:data1": "Ibrahim Salami",
    "twitter:label2": "Est. reading time",
    "twitter:data2": "12 min read",
    "article:published_time": "2026-08-25T10:30:01.711Z",
    "article:modified_time": "2026-08-25T10:30:01.711Z",
    "article:author": "https://towardsdatascience.com/author/ibrahim.salami/"
  },
  "paywall": {
    "listed_paid": false,
    "detected": false,
    "marker": "",
    "public_only": false,
    "policy": "付费/会员内容只保留页面公开可见部分，不绕过付费墙"
  },
  "crawl": {
    "success": true,
    "status_code": 200,
    "error": ""
  },
  "code_blocks": [
    {
      "language": "txt",
      "file": "attachments/70df1b9b832d/code/block_000.txt",
      "chars": 67
    },
    {
      "language": "txt",
      "file": "attachments/70df1b9b832d/code/block_001.txt",
      "chars": 119
    }
  ],
  "images": [
    {
      "status": "http_404",
      "url": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607639/image?etag=1781250125848&width=500&height=500",
      "src": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607639/image?etag=1781250125848&width=500&height=500",
      "alt": "",
      "downloaded": false,
      "discovery": "saved_markdown",
      "retried_at": "2026-10-20T17:42:57Z"
    },
    {
      "status": "http_404",
      "url": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607930/image?etag=1782124566054&width=500&height=500",
      "src": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607930/image?etag=1782124566054&width=500&height=500",
      "alt": "",
      "downloaded": false,
      "discovery": "saved_markdown",
      "retried_at": "2026-10-20T17:42:57Z"
    },
    {
      "status": "http_404",
      "url": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/3660/image?etag=1780176246070&width=500&height=500",
      "src": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/3660/image?etag=1780176246070&width=500&height=500",
      "alt": "",
      "downloaded": false,
      "discovery": "saved_markdown",
      "retried_at": "2026-10-20T17:42:57Z"
    },
    {
      "status": "http_404",
      "url": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/4970/image?etag=1780565225463&width=500&height=500",
      "src": "https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/4970/image?etag=1780565225463&width=500&height=500",
      "alt": "",
      "downloaded": false,
      "discovery": "saved_markdown",
      "retried_at": "2026-10-20T17:42:57Z"
    }
  ],
  "audio": [],
  "videos": [
    {
      "url": "https://www.youtube.com/@ibbysalam",
      "kind": "channel_reference",
      "status": "reference_only"
    },
    {
      "url": "https://www.youtube.com/c/TowardsDataScience",
      "kind": "channel_reference",
      "status": "reference_only"
    }
  ],
  "links": [
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/latest/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/editors-pick/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/the-variable/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/shipai/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/submissions/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/category/data-science/data-engineering/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/author/ibrahim.salami/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/aws/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/data-pipeline/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/data-science/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/docker/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/tag/programming/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/create-your-custom-python-package-that-you-can-pip-install-from-your-git-repository-f90465867893/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/category/programming/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/author/mikehuls/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/an-intuitive-guide-to-lstms-e26f06273ad3/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/category/artificial-intelligence/machine-learning/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/author/victorsim14/"
    },
    {
      "type": "internal",
      "href": "https://towardsdatascience.com/stratified-sampling-you-may-have-been-splitting-your-dataset-all-wrong-8cfdd0d32502/"
    },
    {
      "type": "external",
      "href": "https://write.insightmediagroup.io"
    },
    {
      "type": "external",
      "href": "https://www.linkedin.com/company/towards-data-science/"
    },
    {
      "type": "external",
      "href": "https://x.com/TDataScience"
    },
    {
      "type": "external",
      "href": "https://roadmap.sh/data-engineer"
    },
    {
      "type": "external",
      "href": "https://www.linkedin.com/in/ibrahim-salami-059863228/"
    },
    {
      "type": "external",
      "href": "https://www.youtube.com/@ibbysalam"
    },
    {
      "type": "external",
      "href": "https://x.com/IbbySalam"
    },
    {
      "type": "external",
      "href": "https://www.facebook.com/sharer/sharer.php?title=I+Deployed+My+Data+Pipeline+to+AWS.+Then+Everything+That+Was+%E2%80%9CLocal%E2%80%9D+Broke.&u=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F"
    },
    {
      "type": "external",
      "href": "https://www.linkedin.com/shareArticle?mini=true&title=I+Deployed+My+Data+Pipeline+to+AWS.+Then+Everything+That+Was+%E2%80%9CLocal%E2%80%9D+Broke.&url=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F"
    },
    {
      "type": "external",
      "href": "https://x.com/share?text=I+Deployed+My+Data+Pipeline+to+AWS.+Then+Everything+That+Was+%E2%80%9CLocal%E2%80%9D+Broke.&url=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F"
    },
    {
      "type": "external",
      "href": "https://www.youtube.com/c/TowardsDataScience"
    },
    {
      "type": "external",
      "href": "https://www.threads.net/@towardsdatascience"
    },
    {
      "type": "external",
      "href": "https://bsky.app/profile/towardsdatascience.com"
    },
    {
      "type": "external",
      "href": "https://thenewstack.io"
    },
    {
      "type": "external",
      "href": "https://roadmap.sh"
    },
    {
      "type": "external",
      "href": "https://insightmediagroup.io/creator-network"
    }
  ],
  "repair_version": 2,
  "repaired_at": "2026-10-20T17:25:31Z",
  "source_url": "https://towardsdatascience.com/i-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke/",
  "delivery_status": "unverified",
  "discovery_status": "http_403",
  "missing_reason": "源页面未重新核验:http_403；已按保留正文补采图片",
  "repair_error": "",
  "actual_video_files": [],
  "expected_saved_body_images": 4,
  "image_discovery": "saved_markdown",
  "source_body_markdown": "![Revisit consent button](https://cdn-cookieyes.com/assets/images/revisit.svg)\nWe value your privacy\nWe use cookies to enhance your browsing experience, serve personalised ads or content, and analyse our traffic. By clicking \"Accept All\", you consent to our use of cookies.\nCustomise Reject All Accept All\nCustomise Consent Preferences ![](https://cdn-cookieyes.com/assets/images/close.svg)\nWe use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.\nThe cookies that are categorised as \"Necessary\" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... Show more\nNecessaryAlways Active\nNecessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.\n  * Cookie\nBCTempID\n  * Duration\n10 minutes\n  * Description\nNo description available.\n\n\n  * Cookie\n__cf_bm\n  * Duration\n1 hour\n  * Description\nThis cookie, set by Cloudflare, is used to support Cloudflare Bot Management. \n\n\n  * Cookie\nAWSALBCORS\n  * Duration\n7 days\n  * Description\nAmazon Web Services set this cookie for load balancing.\n\n\n  * Cookie\n_cfuvid\n  * Duration\nsession\n  * Description\nCloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services\n\n\n  * Cookie\nli_gc\n  * Duration\n6 months\n  * Description\nLinkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.\n\n\n  * Cookie\n__hssrc\n  * Duration\nsession\n  * Description\nThis cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session.\n\n\n  * Cookie\n__hssc\n  * Duration\n1 hour\n  * Description\nHubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.\n\n\n  * Cookie\nwpEmojiSettingsSupports\n  * Duration\nsession\n  * Description\nWordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user's browser can display emojis properly.\n\n\n  * Cookie\nBCSessionID\n  * Duration\n1 year 1 month 4 days\n  * Description\nBlueconic sets this cookie as a unique identifier for the BlueConic profile.\n\n\n  * Cookie\n_octo\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\nlogged_in\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\n__Secure-YEC\n  * Duration\npast\n  * Description\nYouTube sets this cookie to stores the user's video player preferences using embedded YouTube video\n\n\n  * Cookie\n__eoi\n  * Duration\n6 months\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nAWSALBTGCORS\n  * Duration\n7 days\n  * Description\nNo description available.\n\n\n  * Cookie\nlogin-status-p\n  * Duration\npast\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nAWSALBTG\n  * Duration\n7 days\n  * Description\nNo description available.\n\n\n  * Cookie\ncsrf_token\n  * Duration\nsession\n  * Description\nNo description available.\n\n\n  * Cookie\ntoken_v2\n  * Duration\n1 day\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nD\n  * Duration\n1 year\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nPHPSESSID\n  * Duration\nsession\n  * Description\nThis cookie is native to PHP applications. The cookie stores and identifies a user's unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.\n\n\n  * Cookie\nVISITOR_PRIVACY_METADATA\n  * Duration\n6 months\n  * Description\nYouTube sets this cookie to store the user's cookie consent state for the current domain. \n\n\n  * Cookie\ncookietest\n  * Duration\nsession\n  * Description\nThe cookietest cookie is typically used to determine whether the user's browser accepts cookies, essential for website functionality and user experience.\n\n\n  * Cookie\n__Host-airtable-session\n  * Duration\n1 year\n  * Description\nThis cookie is used to enable us to integrate the services of Airtable.\n\n\n  * Cookie\n__Host-airtable-session.sig\n  * Duration\n1 year\n  * Description\nThis cookie is used to enable us to integrate the services of Airtable.\n\n\n  * Cookie\nm\n  * Duration\n1 year 1 month 4 days\n  * Description\nStripe sets this cookie for fraud prevention purposes. It identifies the device used to access the website, allowing the website to be formatted accordingly.\n\n\n  * Cookie\nBIGipServer*\n  * Duration\nsession\n  * Description\nMarketo sets this cookie to collect information about the user's online activity and build a profile about their interests to provide advertisements relevant to the user. \n\n\n  * Cookie\n__cfruid\n  * Duration\nsession\n  * Description\nCloudflare sets this cookie to identify trusted web traffic.\n\n\n  * Cookie\n_GRECAPTCHA\n  * Duration\n6 months\n  * Description\nGoogle Recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks.\n\n\n  * Cookie\n__Secure-YNID\n  * Duration\n6 months\n  * Description\nGoogle cookie used to protect user security and prevent fraud, especially during the login process.\n\n\n  * Cookie\ncookieyes-consent\n  * Duration\n1 year\n  * Description\nCookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.\n\n\nFunctional\nFunctional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.\n  * Cookie\nlidc\n  * Duration\n1 day\n  * Description\nLinkedIn sets the lidc cookie to facilitate data center selection.\n\n\n  * Cookie\nbrw\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\nbrwConsent\n  * Duration\n5 minutes\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nWMF-Uniq\n  * Duration\n1 year\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nloom_anon_comment\n  * Duration\n1 year\n  * Description\nNo description available.\n\n\n  * Cookie\nloom_referral_video\n  * Duration\nsession\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nVISITOR_INFO1_LIVE\n  * Duration\n6 months\n  * Description\nA cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.\n\n\n  * Cookie\nyt-remote-connected-devices\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to store the user's video preferences using embedded YouTube videos.\n\n\n  * Cookie\nytidb::LAST_RESULT_ENTRY_KEY\n  * Duration\nNever Expires\n  * Description\nThe cookie ytidb::LAST_RESULT_ENTRY_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future.\n\n\n  * Cookie\nyt-remote-device-id\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to store the user's video preferences using embedded YouTube videos.\n\n\n  * Cookie\nyt-remote-session-name\n  * Duration\nsession\n  * Description\nThe yt-remote-session-name cookie is used by YouTube to store the user's video player preferences using embedded YouTube video.\n\n\n  * Cookie\nyt-remote-fast-check-period\n  * Duration\nsession\n  * Description\nThe yt-remote-fast-check-period cookie is used by YouTube to store the user's video player preferences for embedded YouTube videos.\n\n\n  * Cookie\nyt-remote-session-app\n  * Duration\nsession\n  * Description\nThe yt-remote-session-app cookie is used by YouTube to store user preferences and information about the interface of the embedded YouTube video player.\n\n\n  * Cookie\nyt-remote-cast-available\n  * Duration\nsession\n  * Description\nThe yt-remote-cast-available cookie is used to store the user's preferences regarding whether casting is available on their YouTube video player.\n\n\n  * Cookie\nyt-remote-cast-installed\n  * Duration\nsession\n  * Description\nThe yt-remote-cast-installed cookie is used to store the user's video player preferences using embedded YouTube video.\n\n\n  * Cookie\ncp_session\n  * Duration\n3 months\n  * Description\nCodepen sets this cookie for Help systems found in the website.\n\n\n  * Cookie\nloid\n  * Duration\n1 year 1 month 4 days\n  * Description\nThis cookie is set by the Reddit. The cookie enables the sharing of content from the website onto the social media platform.\n\n\nAnalytics\nAnalytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.\n  * Cookie\n__hstc\n  * Duration\n6 months\n  * Description\nHubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).\n\n\n  * Cookie\nhubspotutk\n  * Duration\n6 months\n  * Description\nHubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.\n\n\n  * Cookie\n_ga\n  * Duration\n1 year 1 month 4 days\n  * Description\nGoogle Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.\n\n\n  * Cookie\n_ga_*\n  * Duration\n1 year 1 month 4 days\n  * Description\nGoogle Analytics sets this cookie to store and count page views.\n\n\n  * Cookie\n__Host-psifi.analyticsTrace\n  * Duration\n6 hours\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\n__Host-psifi.analyticsTraceV2\n  * Duration\n6 hours\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\n_gh_sess\n  * Duration\nsession\n  * Description\nGitHub sets this cookie for temporary application and framework state between pages like what step the user is on in a multiple step form.\n\n\n  * Cookie\nYSC\n  * Duration\nsession\n  * Description\nYSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.\n\n\n  * Cookie\najs_anonymous_id\n  * Duration\n1 year\n  * Description\nThis cookie is set by Segment to count the number of people who visit a certain site by tracking if they have visited before.\n\n\n  * Cookie\nvuid\n  * Duration\n1 year 1 month 4 days\n  * Description\nVimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website. \n\n\nPerformance\nPerformance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.\n  * Cookie\nAWSALB\n  * Duration\n7 days\n  * Description\nAWSALB is an application load balancer cookie set by Amazon Web Services to map the session to the target.\n\n\n  * Cookie\nacq\n  * Duration\npast\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nacq.sig\n  * Duration\npast\n  * Description\nDescription is currently not available.\n\n\n  * Cookie\nptc\n  * Duration\n2 years\n  * Description\nNo description available.\n\n\nAdvertisement\nAdvertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.\n  * Cookie\nmuc_ads\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to collect user behaviour and interaction data to optimize the website.\n\n\n  * Cookie\nguest_id_marketing\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to identify and track the website visitor.\n\n\n  * Cookie\nguest_id_ads\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to identify and track the website visitor.\n\n\n  * Cookie\npersonalization_id\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to integrate and share features for social media and also store information about how the user uses the website, for tracking and targeting.\n\n\n  * Cookie\nguest_id\n  * Duration\n1 year 1 month 4 days\n  * Description\nTwitter sets this cookie to identify and track the website visitor. It registers if a user is signed in to the Twitter platform and collects information about ad preferences.\n\n\n  * Cookie\nbcookie\n  * Duration\n1 year\n  * Description\nLinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs.\n\n\n  * Cookie\n__Secure-ROLLOUT_TOKEN\n  * Duration\n6 months\n  * Description\nYouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment.\n\n\n  * Cookie\nyt.innertube::nextId\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.\n\n\n  * Cookie\nyt.innertube::requests\n  * Duration\nNever Expires\n  * Description\nYouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.\n\n\n  * Cookie\nsession_tracker\n  * Duration\nsession\n  * Description\nThis cookie is set by the Reddit. This cookie is used to identify trusted web traffic. It also helps in adverstising on the website.\n\n\n  * Cookie\nedgebucket\n  * Duration\nsession\n  * Description\nReddit sets this cookie to save the information about a log-on Reddit user, for the purpose of advertisement recommendations and updating the content.\n\n\n  * Cookie\ndid\n  * Duration\n1 year\n  * Description\nArbor sets this cookie to show targeted ads to site visitors.This cookie expires after 2 months or 1 year.\n\n\nUncategorised\nOther uncategorised cookies are those that are being analysed and have not been classified into a category as yet.\nNo cookies to display.\nReject All Save My Preferences Accept All\nToggle Search[](https://towardsdatascience.com/)Toggle Mobile Navigation\n[](https://towardsdatascience.com/)\nPublish AI, ML & data-science insights to a global community of data professionals.\nSign in[Submit an Article](https://write.insightmediagroup.io)\n[Latest](https://towardsdatascience.com/latest/)[Editor's Picks](https://towardsdatascience.com/tag/editors-pick/)[Newsletter](https://towardsdatascience.com/tag/the-variable/)[ShipAI](https://towardsdatascience.com/shipai/)\n* * *\n[Write For TDS](https://towardsdatascience.com/submissions/)\n[LinkedIn](https://www.linkedin.com/company/towards-data-science/)[X](https://x.com/TDataScience)Toggle Search\n[Data Engineering](https://towardsdatascience.com/category/data-science/data-engineering/)\n# I Deployed My Data Pipeline to AWS. Then Everything That Was “Local” Broke.\nWhat moving a Dockerized pipeline off my laptop taught me about containers, networking, and hidden assumptions.\n[Ibrahim Salami](https://towardsdatascience.com/author/ibrahim.salami/)\nAugust 25, 202612 min read\n![](https://assets.insightmediagroup.io/media/wp-content/uploads/2026/08/local-to-AWS.jpg)\nGenerated with Gemini AI\nFor the past few months, I've been building a small data pipeline entirely on my Windows machine. RSS ingestion running in WSL2, Postgres in Docker, Kestra orchestrating the whole thing, dbt transforming the data on top. Every piece worked. I had a working lineage graph, passing tests, a scheduled flow that fetched articles and saved them to a database.\nIt all worked because it was all sitting in one place. My laptop.\nThis article is about what happened when I tried to move it off my laptop and onto a real server, using nothing but the CLI. I expected the hard part to be AWS itself: accounts, instances, networking. It wasn't. The hard part was everything I didn't know I'd built on top of \"it's all running on the same machine.\" That assumption was doing more work than I realized, and taking it away broke things one at a time, in ways that taught me more than the original build did.\n## Setting up the box\nGetting a server running was, honestly, the easy part.\nLearn this step by step with the interactive [Data Engineer](https://roadmap.sh/data-engineer) roadmap.\n> I created an AWS account on the newer $100-credit free tier, set up an IAM user for CLI work instead of using root (a small good habit that saved me from myself more than once), and launched a t3.small EC2 instance running Ubuntu 22.04.\nA few small surprises came up along the way. Nothing major, but enough to remind me that a cloud server isn't just my computer in a different location.\nThe default 8GB disk was too small before I'd even started. Resizing it meant running `growpart `and `resize2fs`, and the instructions I found online kept referencing a device called `xvda`. My instance didn't have one. Newer instance types use the Nitro system, which names drives things like `nvme0n1` instead. Small naming difference, but it's the kind of thing that makes you doubt everything else you're about to type, since if the first command doesn't even find its target, what else is going to quietly not apply.\nI also saw the instance go “impaired” at one point while Kestra was pulling its Docker image for the first time. My best guess was that it had run out of memory. I added a 1GB swap file as a bit of extra breathing room, and it hasn’t happened since. Basically, it gives the system somewhere to offload memory when the RAM gets full, using disk space as a slower backup. It was a simple fix, but it was also my first reminder that a rented server doesn’t have quite the same headroom I’d gotten used to on my laptop.\nI attached an Elastic IP so the server's address wouldn't change every time I stopped and started it, and locked down the security group so only my own IP could reach ports 22 (SSH), 8080 (Kestra's UI), and 5432 (Postgres). That last part turned into its own minor recurring chore: my home internet doesn't give me a fixed IP address, so most sessions started with me re-authorizing whatever address I currently had before anything else would even load.\nNone of this was hard. It was just a lot of small, specific facts about this particular kind of computer that nothing in my local setup had ever forced me to learn.\n## Getting the pipeline over\nI installed Docker, brought over my project with `rsync` instead of `git`, since my repo is public and my `.env` file has real secrets in it, and ran `docker compose up -d`. Postgres came up healthy. Kestra came up too.\nOne thing caught me off guard here: Kestra's flows don't live in files that sync automatically when you copy a project over. They live inside Kestra's own internal database. My one flow, `fetch_rss`, simply didn't exist on the server until I pasted its YAML into the UI myself. It's a small thing, but it's the first hint of a pattern that showed up again and again during this whole process: things that felt like \"my project\" were actually split across two different kinds of state, files I own and copy around, and internal state that lives only inside the running system.\nI clicked Execute. It failed immediately.\n## The toolbox that wasn't there\nMy flow used a `Process` task runner for the actual work. It built the Python virtual environment, installed the dependencies, and ran my ETL script. That was exactly how I had it set up locally, and it had never caused me any problems.\nThe error was about a missing package: `python3.12-venv`. Digging in, I learned something I genuinely hadn't considered. The `Process `task runner doesn't run on the EC2 host. It runs inside Kestra's own container. Kestra's container had Python, but not the piece needed to build a virtual environment.\nI fixed it temporarily by running `apt-get install -y python3.12-venv` directly inside the container. It worked, but I knew it wouldn’t survive a restart because the change wasn’t part of the image itself. I’d fixed the immediate problem, but not the underlying setup.\nThis is where I had to make a real decision, and it's the first genuinely useful lesson from this whole project: **the manager and the worker shouldn't be the same thing.** Kestra's job is to decide when things run and keep track of them. It is not supposed to also be the thing building Python environments and installing packages by hand. Every time a task needed something new, I'd be rebuilding Kestra's own image to fit, which is a strange amount of responsibility to hand to your orchestrator.\nInstead of trying to keep patching Kestra itself, I moved the actual work out of it and switched the task to Kestra’s Docker task runner. The idea was pretty simple: Kestra would spin up a separate container just for the Python job, run the ETL script there, and get rid of the container when the job was done. It was closer to how I wanted the setup to work, although I was about to run into a few more complications.\n## Giving the manager a key it didn't know it needed\nFor Kestra to launch a separate worker container, it needs to be able to talk to Docker itself, the actual daemon managing containers on the host. The way you grant that is by mounting the Docker socket into Kestra's own container:\nyaml\n\n```\nkestra:\n  volumes:\n    - /var/run/docker.sock:/var/run/docker.sock\n```\n\nThis is worth sitting with for a second, because it's not a neutral decision. Anything with access to that socket can effectively ask Docker to do anything on the host, including spinning up containers with far more access than they should have. Locally, on my own laptop, this never registered as a real tradeoff. On a machine sitting on the open internet, it's a genuine one. I decided it was acceptable for a learning project running a single low-stakes flow, but it's exactly the kind of decision that deserves to be made on purpose, not discovered by accident three steps into a debugging session.\nWith the socket mounted, I updated the flow to use the Docker task runner and pointed it at a `python:3.12-slim` image. First real test: `Permission denied`.\nTurned out the socket being mounted wasn't enough. Kestra's own process inside the container wasn't running as root, and that particular door only opens for root. Having the key isn't the same as being allowed to use it. \nAdding `user: \"0:0\"` to Kestra's service definition fixed it, though not before I spent a confusing round-trip discovering that Docker Compose doesn't always rebuild a container just because you changed a line in the file. `docker compose up -d --force-recreate kestra` was the command that actually made the change take effect. `up -d` alone quietly decided nothing important had changed.\n## The volume that wasn't really there\nWith permissions sorted, the flow ran further, and hit a new wall: `Could not open requirements file: No such file or directory.`\nI'd mounted my project folder into the worker container so it could see the script and its dependencies. I could prove the mount worked by running the exact same `docker run` command by hand, outside of Kestra, and it worked perfectly. Whatever Kestra was doing, it wasn't the same thing.\nThis ended up being the longest detour in the whole project, and honestly, probably the one that annoyed me the most in hindsight. The worst part was how quietly it failed. I first tried a setting called `volume-enabled`, but I had it in the wrong part of the config. Then I tried again with the correct property name, `volumeEnabled`—no dash—and put it in the right place, under `plugins.configurations`, targeting the Docker task runner plugin by its full class name. Still nothing.\nNo error. No warning. Nothing. It just kept silently ignoring the setting.\nEventually, I found the real explanation: host-folder mounting for the Docker task runner appears to require Kestra’s Enterprise edition. I’d been chasing a setting that simply doesn’t work on the free tier I’m using. It wasn’t a typo or a misconfiguration. I was basically trying to open a door that I didn’t even know was locked. The frustrating part was that Kestra never made that clear—it just quietly ignored the setting and left me wondering what I was doing wrong.\n> I want to flag this specifically for anyone following a similar path: when a setting appears to do nothing no matter how correctly you write it, stop assuming you have the syntax wrong. Check whether the feature exists in the edition you're actually running.\n## The way that's actually meant to work\nThe fix wasn't to force the mount to work. It was to stop trying to mount anything at all.\nKestra has a feature called Namespace Files, essentially a small file store that lives inside Kestra itself. You upload your project's files into it once, and Kestra hands them to worker containers automatically at runtime, no host folder access required. It's the fully-supported version of what I was trying to hack together with volumes.\nUploading them from the server turned into its own small chain of mistakes, which by this point in the day felt almost expected. I tried a `PUT `request first; Kestra wanted a `POST `with the file wrapped as multipart form data. I got that right and got back silence, no confirmation, no error, which I initially read as success. It wasn't. \nA `curl -i` flag to actually show me the response headers revealed the real problem: `401 Unauthorized.` Basic auth had been on the whole time, my browser just never told me because it was already logged in. `curl` has no memory like that. Adding `-u username:password` to every request fixed it.\nOnce the files were uploading, I made a habit of checking each one immediately after, since one early batch attempt had somehow paired the wrong file sizes with the wrong filenames. Slower, but it meant every mismatch got caught the moment it happened instead of surfacing three steps later as a mysterious script error.\nWith all six files confirmed correct, I rewrote the flow to use `namespaceFiles: enabled: true` instead of a volume mount, and switched the file paths from absolute (`/workspace/python/...`) to relative (`python/...`), since Namespace Files land directly in the container's working directory rather than wherever I'd been mounting things.\nThis time, it actually ran the script. Fetched 25 articles. Parsed them. And then:\ntext\n\n```\npsycopg.OperationalError: connection failed: connection to server at \"127.0.0.1\", port 5432 failed: Connection refused\n```\n\n## The last assumption: localhost isn't a place\nThis was the smallest fix of the whole day, and also the most honest one, in the sense that it exposed an assumption I'd never had reason to question before.\nMy database config had `DB_HOST=localhost` by default. And locally, that was perfectly fine. Everything was running on the same machine, so saying “the database is right here” was actually true.\nBut on AWS, Kestra’s worker was running in its own separate container. So when it tried to connect to `localhost`, it was basically looking inside its own little container and saying, “Where’s the database?” Postgres was sitting in a different container, one that it could reach through the shared Docker network using the service name `postgres` instead.\nI passed the real connection details into the worker container as environment variables, matching them against the container network we'd set up earlier (`networkMode: rss-pipeline_default`, the same network Postgres and Kestra already shared), and the pipeline finally ran start to finish. Fetched articles, saved them, done.\nThe very last thing I fixed, immediately after, was the password sitting in plain text in that same config. Kestra has a KV store built for exactly this, a place to store a value once and reference it from the flow (`{{ kv('DB_PASSWORD') }}`) instead of writing it out anywhere. Small thing, but it felt like the right note to end on: getting something working and then immediately asking whether the way it's working is one I'd be comfortable with someone else seeing.\n## What actually broke, and why it matters\nZooming out, every single failure in this process traced back to one of two things:\n### Things That Worked Locally but Broke Across Containers\n_“The database is on localhost”, “The Python environment I set up by hand is still here.”_. Locally, being on the same machine does a lot of invisible work for you. You don’t think of those things as requirements because you never had to. They’re just there, and everything works. Once you move to separate containers, those assumptions disappear, and suddenly you realize how much you were relying on them without even noticing.\n### Things That Failed Silently Instead of Loudly. \nA mistyped config property. A feature that doesn't exist in the tier you're running. An unauthenticated request that returns nothing instead of an error. None of these crashed anything. They just quietly did less than I asked, which is a much harder thing to debug than an actual crash, because there's no stack trace pointing at the gap. You just have to notice that something didn't happen.\nIf I had to compress this into one piece of advice for someone doing this for the first time: when something you built locally moves to a real server, treat every assumption about \"things being in the same place\" as a claim you need to re-prove, not a fact you get to keep. And when a fix seems to do nothing at all, however many times you double check the syntax, consider that it might genuinely be doing nothing, because the feature isn't available to you in the first place.\n## What's Next\nThe pipeline itself is done, running, and actually saving real data to a cloud database. That was the goal for this piece, and it's genuinely satisfying to type that sentence after the day I just had.\nI've been going back and forth on what comes after this. Part of me wants to finish the full loop, connect `rss-transform`, my dbt project, to this new cloud database, and close out the RSS pipeline as one complete, end-to-end story from raw feed to clean, tested data. There's something appealing about that kind of closure.\nBut if I'm honest, this project has already taught me most of what it set out to teach me. I went from \"what even is a Docker container\" to debugging Docker socket permissions, silent config failures, and container networking, on a real server, with real consequences when I got something wrong. That was the whole point of picking this project in the first place, and at some point, squeezing more lessons out of the same pipeline starts to feel like staying somewhere past when I've actually outgrown it.\nSo I'm genuinely undecided, and I think that's an honest place to leave this piece. Maybe the next article is the dbt-to-cloud connection, wrapping this series up properly. Maybe it's something completely new, a fresh project, a different set of skills, a reason to feel like a beginner again in a new way. I don't know yet, and I'd rather say that plainly than manufacture a tidy roadmap I'm not actually committed to.\nEither way, I'll be documenting it the same way I documented this: honestly, mistakes included.\n_This is part of my ongoing series documenting my transition from systems analyst to data engineer. If you’ve been following along, thank you._\n_Connect with me on_[ _LinkedIn_](https://www.linkedin.com/in/ibrahim-salami-059863228/) _,_[_YouTube_](https://www.youtube.com/@ibbysalam) _, and_[ _Twitter_](https://x.com/IbbySalam) _._\n## Register Now to Continue Reading\n### Unlock Towards Data Science with a Free Account\nAll articles on Towards Data Science are available to registered users. Create a free account today to access this article and thousands more.\nRegister for freeSign in to your account\n* * *\n![](https://assets.insightmediagroup.io/media/1787657709013_9ddcph.jpeg)\nWritten By\n## [Ibrahim Salami](https://towardsdatascience.com/author/ibrahim.salami/)\n[See all from Ibrahim Salami](https://towardsdatascience.com/author/ibrahim.salami/)\n[AWS](https://towardsdatascience.com/tag/aws/)[Data Pipeline](https://towardsdatascience.com/tag/data-pipeline/)[Data Science](https://towardsdatascience.com/tag/data-science/)[Docker](https://towardsdatascience.com/tag/docker/)[Programming](https://towardsdatascience.com/tag/programming/)\nShare This Article\n  * [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F&title=I%20Deployed%20My%20Data%20Pipeline%20to%20AWS.%20Then%20Everything%20That%20Was%20%E2%80%9CLocal%E2%80%9D%20Broke.)\n  * [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F&title=I%20Deployed%20My%20Data%20Pipeline%20to%20AWS.%20Then%20Everything%20That%20Was%20%E2%80%9CLocal%E2%80%9D%20Broke.)\n  * [](https://x.com/share?url=https%3A%2F%2Ftowardsdatascience.com%2Fi-deployed-my-data-pipeline-to-aws-then-everything-that-was-local-broke%2F&text=I%20Deployed%20My%20Data%20Pipeline%20to%20AWS.%20Then%20Everything%20That%20Was%20%E2%80%9CLocal%E2%80%9D%20Broke.)\n\n\nTowards Data Science is a community publication. Submit your insights to reach our global audience and earn through the TDS Author Payment Program.\n[Write for TDS](https://towardsdatascience.com/submissions/)\n## Related Articles\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2021/07/02qMiMNgPAyShmUlQ.jpg)](https://towardsdatascience.com/create-your-custom-python-package-that-you-can-pip-install-from-your-git-repository-f90465867893/)\n## [Create Your Custom, private Python Package That You Can PIP Install From Your Git Repository](https://towardsdatascience.com/create-your-custom-python-package-that-you-can-pip-install-from-your-git-repository-f90465867893/)\n[Programming](https://towardsdatascience.com/category/programming/)\nShare your self-built Python package using your git repo.\n[Mike Huls](https://towardsdatascience.com/author/mikehuls/)\nJuly 3, 20216 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2020/09/16OVV5rtaPqG4Vfezy67Vpg-scaled.jpeg)](https://towardsdatascience.com/an-intuitive-guide-to-lstms-e26f06273ad3/)\n## [An Intuitive Guide to LSTMs](https://towardsdatascience.com/an-intuitive-guide-to-lstms-e26f06273ad3/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nby creating them from scratch\n[Victor Sim](https://towardsdatascience.com/author/victorsim14/)\nSeptember 27, 20207 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2021/07/0mdnULRKu64-sbAGX-scaled.jpg)](https://towardsdatascience.com/stratified-sampling-you-may-have-been-splitting-your-dataset-all-wrong-8cfdd0d32502/)\n## [Stratified Sampling: You May Have Been Splitting Your Dataset All Wrong](https://towardsdatascience.com/stratified-sampling-you-may-have-been-splitting-your-dataset-all-wrong-8cfdd0d32502/)\n[Deep Learning](https://towardsdatascience.com/category/artificial-intelligence/deep-learning/)\nRandomly generating splits of the data set is not always the optimal solution, as the proportions in the target variable can be extremely...\n[Angel Igareta](https://towardsdatascience.com/author/angeligareta/)\nJuly 21, 20213 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2021/08/1a2OQuKItPC4dUs-Y5Cw7_A.jpeg)](https://towardsdatascience.com/3-bitter-lessons-i-wish-i-knew-earlier-as-a-big-data-engineer-e2956bcc7b29/)\n## [3 Bitter Lessons I Wish I Knew Earlier As a Big Data Engineer](https://towardsdatascience.com/3-bitter-lessons-i-wish-i-knew-earlier-as-a-big-data-engineer-e2956bcc7b29/)\n[Data Science](https://towardsdatascience.com/category/data-science/)\nThe Dos and Don'ts of data engineering\n[Nam Nguyen](https://towardsdatascience.com/author/namnguyenwrite/)\nAugust 6, 20216 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2021/10/0Mr2b9T021jpKobiU.jpg)](https://towardsdatascience.com/5-r-objects-you-should-learn-to-master-r-programming-685341ce6661/)\n## [5 R Objects You Should Learn to Master R Programming](https://towardsdatascience.com/5-r-objects-you-should-learn-to-master-r-programming-685341ce6661/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nR is a really flexible language - here, we are going to learn the objects that will power up your R Data Analytics and Science scripts\n[Ivo Bernardo](https://towardsdatascience.com/author/ivopbernardo/)\nOctober 29, 20216 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2025/08/sse7.png)](https://towardsdatascience.com/introducing-server-sent-events-in-python/)\n## [Introducing Server-Sent Events in Python](https://towardsdatascience.com/introducing-server-sent-events-in-python/)\n[Programming](https://towardsdatascience.com/category/programming/)\nA simpler path to coding real-time web applications\n[Thomas Reid](https://towardsdatascience.com/author/thomas_reid/)\nAugust 4, 202512 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2021/08/11O4nJcYXAjy2Fe3NXVTJUg-scaled.jpeg)](https://towardsdatascience.com/make-a-mock-real-time-stream-of-data-with-python-and-kafka-7e5e23123582/)\n## [Make a mock \"real-time\" stream of data with Python and Kafka](https://towardsdatascience.com/make-a-mock-real-time-stream-of-data-with-python-and-kafka-7e5e23123582/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nEverything you need to turn a .csv file of timestamped data into a Kafka stream with Python and Docker\n[Maria Patterson](https://towardsdatascience.com/author/maria-patterson/)\nAugust 29, 20215 min read\n  * [![](https://towardsdatascience.com/images/fallback-image.jpg)](https://towardsdatascience.com/latest-picks-meta-policy-gradients-a-survey-9fc11033006a/)\n## [Latest picks: Meta-Policy Gradients: A Survey](https://towardsdatascience.com/latest-picks-meta-policy-gradients-a-survey-9fc11033006a/)\n[Machine Learning](https://towardsdatascience.com/category/artificial-intelligence/machine-learning/)\nYour daily dose of data science\n[TDS Editors](https://towardsdatascience.com/author/towardsdatascience/)\nJanuary 4, 20211 min read\n  * [![](https://assets.insightmediagroup.io/media/wp-content/uploads/2026/01/df-main.png)](https://towardsdatascience.com/from-dataslows-to-dataflows-the-gen2-performance-revolution-in-microsoft-fabric/)\n## [From ‘Dataslows’ to Dataflows: The Gen2 Performance Revolution in Microsoft Fabric](https://towardsdatascience.com/from-dataslows-to-dataflows-the-gen2-performance-revolution-in-microsoft-fabric/)\n[Data Engineering](https://towardsdatascience.com/category/data-science/data-engineering/)\nHow the latest Dataflow enhancements change the way we play the game\n[Nikola Ilic](https://towardsdatascience.com/author/datamozart/)\nJanuary 13, 20268 min read\n\n\n  * [YouTube](https://www.youtube.com/c/TowardsDataScience)\n  * [X](https://x.com/TDataScience)\n  * [LinkedIn](https://www.linkedin.com/company/towards-data-science/)\n  * [Threads](https://www.threads.net/@towardsdatascience)\n  * [Bluesky](https://bsky.app/profile/towardsdatascience.com)\n\n\n[](https://towardsdatascience.com/)\nYour home for data science and AI. The world's leading publication for data science, data analytics, data engineering, machine learning, and artificial intelligence professionals.\nSubscribe to Our Newsletter[Write For TDS](https://towardsdatascience.com/submissions/)•[About](https://towardsdatascience.com/about-towards-data-science-d691af11cc2f/)•[Advertise](https://contact.towardsdatascience.com/advertise-with-towards-data-science)•[Privacy Policy](https://towardsdatascience.com/privacy-policy/)•[Terms of Use](https://towardsdatascience.com/website-terms-of-use/)\n© Insight Media Group, LLC 2026•[The New Stack](https://thenewstack.io)•[roadmap.sh](https://roadmap.sh)•[Creator Network](https://insightmediagroup.io/creator-network)\n####  Recommended Articles \nClose\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607639/image?etag=1781250125848&width=500&height=500) Javascript Fatigue: HTMX Is All You Need to Build ChatGPT — Part 1 ](https://towardsdatascience.com/javascript-fatigue-you-dont-need-js-to-build-chatgpt/ \"Javascript Fatigue: HTMX Is All You Need to Build ChatGPT — Part 1\")\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/607930/image?etag=1782124566054&width=500&height=500) The Subset Sum Problem Solved in Linear Time for Dense Enough Inputs ](https://towardsdatascience.com/subset-sum-problem-solved-in-linear-time-for-dense-enough-inputs/ \"The Subset Sum Problem Solved in Linear Time for Dense Enough Inputs\")\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/3660/image?etag=1780176246070&width=500&height=500) Does Your Company Have a Data Strategy? ](https://towardsdatascience.com/does-your-company-have-a-data-strategy-e8944dbec4ae/ \"Does Your Company Have a Data Strategy?\")\n  * [ ![](https://h030.towardsdatascience.com/rest/v2/contentStores/d7d3a4ab-7caf-4383-bbd2-fbf7fb4f1787/items/4970/image?etag=1780565225463&width=500&height=500) Productivity Tips, Data Career Insights, and Other Recent Must-Reads ](https://towardsdatascience.com/productivity-tips-data-career-insights-and-other-recent-must-reads-5c47eb7a2fe0/ \"Productivity Tips, Data Career Insights, and Other Recent Must-Reads\")\n\n\n",
  "body_base_path": "attachments/70df1b9b832d/pages/",
  "body_markdown_path": "attachments/70df1b9b832d/pages/archived-body.md",
  "local_html": "attachments/70df1b9b832d/pages/archived-body.html",
  "body_source": "prior_capture"
}