Continuous Path Verification: Minute Canaries for Auth, Pay, and Search

/healthz green
 + auth canary fails (IdP redirect loop) → customers cannot log in
 + pay canary fails (processor 3DS timeout) → revenue stops
 + search canary fails (0 hits for known SKU) → discovery broken

const synthetics = require("Synthetics");
const log = require("SyntheticsLogger");

const flow = async function () {
 const page = await synthetics.getPage();
 await page.goto(process.env.BASE_URL + "/login", { waitUntil: "networkidle0" });
 await page.type("#email", process.env.CANARY_USER);
 await page.type("#password", process.env.CANARY_PASS);
 await Promise.all([
 page.waitForNavigation({ waitUntil: "networkidle0" }),
 page.click("#submit"),
 ]);
 const ok = await page.$("[data-testid=home-ready]");
 if (!ok) throw new Error("auth_home_ready_missing");

 // pay path: create intent for $0.00 test SKU, assert client_secret shape
 const pay = await page.evaluate(async () => {
 const r = await fetch("/v1/pay/intent", { method: "POST", credentials: "include" });
 return { status: r.status, body: await r.json() };
 });
 if (pay.status !== 200 || !pay.body.clientSecret) throw new Error("pay_intent_failed");

 // search: known fixture SKU must appear
 await page.goto(process.env.BASE_URL + "/search?q=canary-sku-42");
 const hit = await page.$("[data-sku='canary-sku-42']");
 if (!hit) throw new Error("search_fixture_missing");
};
exports.handler = async () => synthetics.executeStep("path_verify", flow);

# CloudWatch alarm sketch
AlarmName: pay-canary-failed
MetricName: SuccessPercent
Namespace: CloudWatchSynthetics
Threshold: 100
ComparisonOperator: LessThanThreshold
EvaluationPeriods: 3
Period: 60
TreatMissingData: breaching