Message queues: Delivery and operations
Uses visibility timeout plus heartbeat, caps attempts, moves poison messages to a dead-letter queue with payload redaction, and requires idempotent handlers.
Suppresses recipients after a hard bounce or spam complaint, distinguishes transient failures, honors List-Unsubscribe, and never retries delivery to a suppressed address.