| Secure Architectures |
IAM, KMS, WAF, Secrets Manager, Shield, Cognito, PrivateLink |
Implement the Principle of Least Privilege, Encryption at Rest/Transit, and Defense in Depth at the Edge and VPC boundaries. |
| Resilient Architectures |
Route 53, ELB, Auto Scaling, Multi-AZ RDS, S3, SQS, DR Strategies |
Design Multi-AZ/Multi-Region systems that handle failure gracefully, minimize RPO/RTO, and decouple components via queuing. |
| High-Performing Architectures |
EC2 (Instance Types), Lambda, Aurora, ElastiCache, CloudFront |
Select the right compute/storage paradigm for the workload and use caching to optimize latency and throughput. |
| Cost-Optimized Architectures |
S3 Storage Classes, Savings Plans, Spot Instances, Compute Optimizer |
Select the most cost-effective resources, automate right-sizing, and implement commitment-based discounts for steady-state workloads. |