Design an ETL pipeline using Kafka and Spark Streaming

Section 4 — The Trade-offs (The 'Senior' part)
CAP Theorem: We choose AP—Kafka provides high availability; consumers tolerate eventual consistency during rebalances. Delta Lake merge provides idempotent consistency at the sink. For analytics, Silver and Gold stale by 5–10 minutes is acceptable.

Cost vs. Performance: Glue ($0.44/DPU-hr, 10 min minimum) vs EMR Serverless ($0.06/vCPU-hr): Glue is simpler for Kafka-to-Delta. MSK ($0.21/broker-hr). Delta storage: $0.023/GB on S3. EMR wins for 8hr+ daily jobs.

Blast Radius: Kafka broker fail: ISR replica becomes leader in under 10 seconds. Spark executor fail: tasks retry on another executor; checkpoint restores. Driver fail: job dies—restart from checkpoint. Delta merge is idempotent, so retries are safe.

Section 5 — Pro-Tip
Pro-Move: Checkpoint to S3; MERGE by (pk, batch_id); 5-min micro-batches; use Glue bookmarks for incremental file processing.
Red Flag: No checkpoint—offset loss on restart causes full replay or data loss; interviewers expect checkpoint strategy. From a Principal Engineer perspective, the key differentiators are operational rigor—defined SLAs, runbooks, and chaos testing—and cost consciousness—right-sizing, reserved capacity, and incremental processing to minimize compute. The failure modes we guard against include partition events (Kafka ISR, consumer rebalance), poison messages (DLQ with alerting), and offset loss (S3 checkpoint). Interview red flags include missing idempotency (duplicates on retry), no DLQ (one bad record blocks the pipeline), and checkpointing to ephemeral storage (state lost on preemption). Production systems require monitoring of consumer lag, data freshness SLOs, and cost per record processed. Schema evolution should be additive-only with Schema Registry; partitioning strategies must align with query filters (date, region); blast radius is contained through replication, circuit breakers, and graceful degradation. When choosing between CP and AP: ledger and warehouse layers favor consistency; streams and caches favor availability. Cost optimization: Glue for bursty jobs under 2 hours; EMR for sustained 8+ hour workloads. Always quantify improvements—latency reduction, cost savings, volume handled. Data skew mitigation via salting and AQE prevents hotspot tasks; exactly-once semantics require idempotent sinks; fan-out patterns enable multiple consumers without duplication. TTL policies on Bronze reduce storage cost; incremental processing cuts compute by 90% versus full scans. Replication factor of three with min.insync.replicas=2 ensures durability; consumer count should match or exceed partition count; event-time over processing-time handles late arrivals correctly. Medallion architecture separates raw from curated; quality gates at Silver prevent bad data propagation; conformed dimensions enable cross-mart consistency. In interviews, demonstrate production experience by citing specific metrics: P95 latency, cost per million events, recovery time objective. Avoid generic answers; tie each design choice to a measurable outcome. The trade-off between consistency and availability is per-component: choose CP for financial transactions, AP for analytics. Scale testing should cover 10x peak load; runbooks should document failure recovery steps. Blue-green deployments enable zero-downtime schema evolution; view abstraction with COALESCE supports additive column migration. For real-time systems, define SLOs before building—lag under five minutes and freshness under one hour are common targets. Correlation IDs in log records enable end-to-end tracing when debugging production incidents. Reserve capacity for traffic spikes; implement circuit breakers to prevent cascading failures across dependent services. Document design decisions and their trade-offs for future maintainability. This demonstrates production-grade system design thinking.