awesome-kubernetes/v2-docs/aws-architecture.md

AWS Architecture and Best Practices

!!! info "Architectural Context" Detailed reference for AWS Architecture and Best Practices in the context of Cloud Providers (Hyperscalers).

Standard Reference

• The Truth About Downtime in the Cloud [COMMUNITY-TOOL]
• awstip.com: Increase Security and Efficiency with a 3-Tier Cloud Architecture [COMMUNITY-TOOL]
• DZone: A Guide to Performance Challenges with AWS EC2: Part 1 [COMMUNITY-TOOL]
• foreseeti.com: How to become and stay AWS well architected in a smart way [COMMUNITY-TOOL]
• medium.com/@buraktahtacioglu: AWS Well-Architected Framework — AWS Roadmap [COMMUNITY-TOOL]

Cloud Architecture

Case Studies

Enterprise Scale

• (2019) aws.amazon.com: Trainline Case Study [N/A CONTENT] [ADVANCED LEVEL] [CASE STUDY] [CASE STUDY] [COMMUNITY-TOOL] — Architectural case study mapping Trainline's migrations onto AWS using ECS containerized deployments and RDS clusters. Demonstrates successful reduction in database locking periods and outlines zero-downtime blue/green microservice delivery strategies.

Cloud Infrastructure

AWS

Best Practices

• (2014) AWS Tips I Wish I'd Known Before I Started (Feb 2014) [NONE CONTENT] [COMMUNITY-TOOL] — A collection of fundamental AWS operational constraints including early patterns in IAM, billing, and VPC configuration. Although dated, it outlines core architectural traps teams still solve using Control Tower.

Governance

• (2021) AWS Architecture Blog: Use templated answers to perform Well-Architected reviews at scale [NONE CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Technical review detailing templated governance answers to scale AWS Well-Architected reviews. Offers architects a mechanism to automate and standardise security compliance reviews across decentralized environments.

Legacy Systems

• (2022) cbui.dev: Every company has an "old" production AWS account [NONE CONTENT] [LEGACY] — Explores patterns for managing single legacy production accounts containing unmapped dependencies. Details modernization pathways using AWS Organizations and VPC peering strategies.

Security

• (2021) thenewstack.io: Avoid the 5 Most Common Amazon Web Services Misconfigurations in Build-Time [NONE CONTENT] [COMMUNITY-TOOL] — Focuses on build-time CloudFormation and Terraform configuration errors. Outlines practical strategies for shifting infrastructure security check operations left into standard CI/CD pipelines.

FinOps

Cost Management

• (2015) AWS Cost Explorer Update – Access to EC2 Usage Data [NONE CONTENT] [COMMUNITY-TOOL] — Analyzes early programmatic access to granular EC2 metrics inside Cost Explorer. Provides foundational methodologies for early-stage cloud-native resource optimization and FinOps planning.

FinOps and Cloud Optimization

Sustainability

• (2023) Optimizing your AWS Infrastructure for Sustainability, Part I: Compute [COMMUNITY-TOOL] — An engineering guide to optimizing AWS compute architectures for sustainability. Explores Graviton migrations, automated container resizing, and target serverless setups to lower carbon emissions.
• (2023) Optimizing your AWS Infrastructure for Sustainability, Part II: Storage [COMMUNITY-TOOL] — This second installment targets storage modernization. Details how to implement Amazon S3 Lifecycle configurations, S3 Intelligent-Tiering, and storage optimization practices.

Infrastructure as Code

Compliance Auditing

• (2026) AWS Well-Architected IaC Analyzer ⭐ 483 [PYTHON CONTENT] [ADVANCED LEVEL] 🌟🌟 [COMMUNITY-TOOL] — An AWS-backed auditing analyzer designed to inspect CloudFormation and Terraform designs against the AWS Well-Architected standard. Evaluates infrastructure-as-code deployments for security vulnerabilities and reliability issues before runtime provisioning.

Cloud Native

AWS (1)

Governance (1)

AWS Organizations

• (2024) AWS Organizations: The Key to Managing Your Cloud Infrastructure Effectively [COMMUNITY-TOOL] — Explores core configuration benefits of AWS Organizations for multi-account governance. Highlights service control policies (SCPs), unified billing, and secure programmatic account instantiation using IaC.

Cloud Platform

AWS Infrastructure

Reference Architectures

• (2026) AWS Labs GitHub [N/A CONTENT] [ADVANCED LEVEL] [EMERGING] — The central AWS Labs GitHub organization housing hundreds of active experimental projects, tooling integrations, and reference CDK blueprints. Live Grounding highlights this hub as a critical launchpad for emerging patterns in infrastructure-as-code and cloud automation. It provides platform engineering teams with robust, peer-reviewed building blocks for accelerated architecture design.

Data Architecture

Databases

Amazon Aurora

• (2015) InfoWorld Review – Amazon Aurora Rocks MySQL [NONE CONTENT] [COMMUNITY-TOOL] — Historical analysis validating Amazon Aurora's decoupled compute and storage architecture. In production contexts, it remains a de facto standard for high-throughput, low-latency relational engines.

Enterprise Architecture

Cloud Architecture Best Practices

API Design

• (2023) Architecture patterns for consuming private APIs cross-account [ADVANCED LEVEL] [COMMUNITY-TOOL] — Highlights architectural approaches for routing and consuming private APIs across different AWS accounts. Emphasizes security through AWS PrivateLink, Route 53, and Network Load Balancers.

AWS Well-Architected

• (2023) AWS Well Architected Framework [DOCUMENTATION] [COMMUNITY-TOOL] — The official documentation framework outlining six fundamental cloud architectural pillars: operational excellence, security, reliability, performance, cost optimization, and sustainability.
• (2023) aws.amazon.com/well-architected-tool: AWS Well-Architected Tool [DOCUMENTATION] [COMMUNITY-TOOL] — Overview of AWS's native tool designed to assess cloud workloads. Integrates with the Well-Architected Framework to systematically audit infrastructure and highlight configuration risks.
• (2023) infoq.com: AWS Updates the Well-Architected Framework [COMMUNITY-TOOL] — Analyzes key revisions to the AWS Well-Architected Framework. Reviews shifts in security baseline configurations, serverless deployment guidelines, and the sustainability assessment pillar.

Cloud Governance

• (2023) Strategies for consolidating AWS environments [ADVANCED LEVEL] [COMMUNITY-TOOL] — Details architectural strategies for consolidating multi-account AWS environments. Explores AWS Organizations setups, control tower governance, and billing unification across enterprise structures.
• (2023) Maintain visibility over the use of cloud architecture patterns [COMMUNITY-TOOL] — Outlines frameworks and tools to track, map, and enforce specific cloud architecture patterns across decentralized developer teams, helping prevent systemic configuration drift.

Design Blueprints

• (2023) AWS application-architecture [DOCUMENTATION] [COMMUNITY-TOOL] — An architecture drafting resource providing standard AWS application design templates, components, and layout blocks. Essential for mapping out multi-tier cloud services.
• (2023) AWS Architecture Blog [DOCUMENTATION] [COMMUNITY-TOOL] — The official blog portal showcasing cloud solutions, pattern guides, and engineering strategies written directly by AWS Systems Architects.
• (2023) AWS Official Blog [DOCUMENTATION] [COMMUNITY-TOOL] — The master AWS news platform. Tracks every new feature rollout, managed service launch, operational update, and security announcement from AWS engineering groups.

Engineering Culture

• (2023) dev.to: How Well-Architected Enables Junior Engineers [COMMUNITY-TOOL] — Examines how the AWS Well-Architected Framework acts as an educational and operational safety net for junior engineers, establishing structured system design patterns across developer teams.

Multi-Region Architecture

• (2023) Creating a Multi-Region Application with AWS Services – Part 1, Compute, Networking, and Security [ADVANCED LEVEL] [COMMUNITY-TOOL] — Part one of a multi-region deployment guide. Covers DNS failover routing with Route 53, cross-region VPC peering, compute distribution, and unified security controls across AWS regions.
• (2023) Creating a Multi-Region Application with AWS Services – Part 2, Data and Replication [ADVANCED LEVEL] [COMMUNITY-TOOL] — Part two focuses on database replication, global data consistency, storage syncing protocols, and handling split-brain scenarios in multi-region cloud infrastructures.

Production Case Studies

• (2023) This is My Architecture [COMMUNITY-TOOL] — AWS's premier video and article series showcasing production-grade architectural solutions. Focuses on design tradeoffs, performance strategies, and networking topologies of modern web applications.

Cloud Governance (1)

Case Studies (1)

• (2023) ==github.com/ministryofjustice: Modernisation Platform - Architecture Decisions== ⭐ 724 [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The public collection of Architecture Decision Records (ADRs) from the UK Ministry of Justice Modernisation Platform. This serves as a key reference for cloud governance, public sector IT standards, and clear decision documentation.

Kubernetes and Platform Engineering

Modernization Tools

Microservice Migration

• (2023) AWS App2Container: Migrate your Applications to Containers at Scale [ADVANCED LEVEL] [LEGACY] — Introduces AWS App2Container, a tool that automates the migration of legacy .NET and Java web applications into containerized structures ready for deployment on Amazon ECS or EKS.
• (2023) Let’s Architect! Architecting microservices with containers [LEGACY] — A foundational guide for decoupling large legacy applications. Explores container hosting options on ECS and EKS, microservice discovery patterns, and inter-service security standards.

Software Engineering

Frontend Architecture

Design Patterns

• (2021) Clean Architecture on Frontend [ADVANCED LEVEL] [COMMUNITY-TOOL] — Adapts Robert C. Martin's Clean Architecture principles to modern client-side frontend applications. Focuses on isolation of core business domains, UI frameworks, and data sources via explicit dependency inversion layers, simplifying testing and future framework transitions.

---

💡 Explore Related: Googlecloudplatform | Edge Computing | Azure