CLD110 · AWS Academy Cloud Foundations
Module 9
Cloud Architecture
Well-Architected Framework · Six pillars · Design principles · Loose coupling · Integration services
Module Objective
Module Objective: Describe the six pillars of the AWS Well-Architected Framework, apply core cloud design principles, and explain how loosely coupled architectures and application integration services improve resilience and scalability.
Synthesizes Modules 3–8 — this module reframes infrastructure, security, networking, compute, storage, and databases as inputs to architectural decisions.
The AWS Well-Architected Framework
The AWS Well-Architected Framework is a set of questions and best practices, developed from AWS's experience reviewing thousands of customer architectures, used to evaluate whether a cloud architecture is well built. It's organized around six pillars.
| Pillar | Focus |
|---|---|
| Operational Excellence | Running and monitoring systems, and continually improving processes |
| Security | Protecting data, systems, and assets |
| Reliability | Recovering from failures and meeting demand |
| Performance Efficiency | Using computing resources efficiently as demand changes |
| Cost Optimization | Avoiding unnecessary costs |
| Sustainability | Minimizing the environmental impact of running workloads |
🔵 Why It Matters
The Well-Architected Framework isn't a checklist to complete once — it's a lens for continually re-evaluating trade-offs as a workload evolves, since improving one pillar can sometimes come at the expense of another.
Operational Excellence and Security Pillars
| Pillar | Key Design Principles |
|---|---|
| Operational Excellence | Perform operations as code; make frequent, small, reversible changes; anticipate failure; learn from operational events |
| Security | Implement a strong identity foundation; enable traceability; apply security at all layers; automate security best practices; protect data in transit and at rest |
✅ Tip — This Recaps Module 4
The Security pillar's "strong identity foundation" and "protect data in transit and at rest" principles are exactly the IAM, least-privilege, and KMS encryption concepts covered in Module 4 — the Well-Architected Framework is where those individual practices get tied together.
Reliability and Performance Efficiency Pillars
| Pillar | Key Design Principles |
|---|---|
| Reliability | Automatically recover from failure; test recovery procedures; scale horizontally to increase aggregate availability; stop guessing capacity; manage change through automation |
| Performance Efficiency | Democratize advanced technologies; go global in minutes; use serverless architectures; experiment more often; consider mechanical sympathy (matching technology choices to the task) |
🔵 Note
"Scale horizontally to increase aggregate availability" is the same principle behind Auto Scaling groups and Multi-AZ RDS deployments from Modules 6 and 8 — spreading load across many smaller resources rather than relying on one large one.
Cost Optimization and Sustainability Pillars
| Pillar | Key Design Principles |
|---|---|
| Cost Optimization | Adopt a consumption model; measure overall efficiency; stop spending on undifferentiated heavy lifting; analyze and attribute expenditure |
| Sustainability | Understand your impact; establish sustainability goals; maximize utilization; anticipate and adopt new, more efficient offerings; reduce the downstream impact of your workloads |
✅ Tip — Cost Optimization Connects to Module 2
"Adopt a consumption model" and "analyze and attribute expenditure" are direct callbacks to the pay-as-you-go pricing and cost-allocation tagging practices covered in Module 2's billing tools.
Cloud Design Principles
Across all six pillars, a handful of recurring design principles distinguish cloud-native architecture from traditional, static, on-premises design.
| Principle | What It Means |
|---|---|
| Scalability | Design for growth — horizontally (more resources) rather than only vertically (bigger resources) |
| Disposable resources | Treat infrastructure as temporary and replaceable, rather than a long-lived, hand-configured server |
| Automation | Automate repeatable operational tasks instead of relying on manual processes |
| Loose coupling | Design components so they can be updated, scaled, or replaced independently |
🔵 Note
"Disposable resources" is why Auto Scaling groups launch and terminate EC2 instances freely (Module 6) — instances are treated as replaceable capacity rather than individually precious machines.
Loose Coupling and Decoupled Architectures
A tightly coupled architecture has components that depend directly on one another being available at the same time — if one fails, the failure can cascade. A loosely coupled architecture uses an intermediary, such as a queue or message bus, so components can operate, fail, and scale independently.
| Architecture | Characteristic |
|---|---|
| Monolithic | A single, tightly integrated application where all components are deployed and scaled together |
| Microservices | An application broken into small, independently deployable services that communicate over well-defined interfaces |
⚠️ Warning — Decoupling Adds Complexity
Loose coupling and microservices improve resilience and independent scalability, but they also introduce distributed-systems complexity — more moving parts, more network calls, and more places for a failure to occur. It's a trade-off, not a free upgrade.
Application Integration Services
AWS provides managed services specifically to implement loose coupling between application components.
| Service | Pattern | What It Does |
|---|---|---|
| Amazon Simple Queue Service (SQS) | Queue | Holds messages between a producer and consumer, so the consumer processes them independently and at its own pace |
| Amazon Simple Notification Service (SNS) | Pub/sub | Publishes a message to multiple subscribers at once — email, SMS, Lambda, SQS queues, and more |
| Amazon EventBridge | Event bus | Routes events between AWS services, SaaS applications, and custom applications based on defined rules |
✅ Tip — Queue vs. Fan-Out
SQS is typically used when exactly one consumer should process each message (a queue). SNS is used when the same message should reach many subscribers at once (fan-out) — the two are often combined, with SNS fanning a message out to multiple SQS queues.
The AWS Well-Architected Tool
The AWS Well-Architected Tool, available free in the AWS Management Console, walks through the Well-Architected Framework's questions against a specific workload and produces a report highlighting risks and recommended improvements.
| Output | What It Provides |
|---|---|
| Risk identification | Flags areas where a workload diverges from Well-Architected best practices, by pillar |
| Improvement plan | Links each identified risk to specific AWS documentation and recommended remediation steps |
| Milestones | Lets teams save a snapshot of a review to track improvement over time |
🔵 Note
The Well-Architected Tool is a self-assessment framework, not an automated scanner — it works by answering structured questions about a workload's design, rather than inspecting the actual deployed resources.
Key Terms (1 of 2)
- AWS Well-Architected Framework
- A set of questions and best practices, organized into six pillars, for evaluating cloud architectures
- Operational Excellence pillar
- Focuses on running and monitoring systems and continually improving processes
- Reliability pillar
- Focuses on recovering from failures and meeting demand
- Performance Efficiency pillar
- Focuses on using computing resources efficiently as demand changes
- Sustainability pillar
- Focuses on minimizing the environmental impact of running workloads
Key Terms (2 of 2)
- loose coupling
- Designing components so they can be updated, scaled, or replaced independently of one another
- microservices
- An architectural style breaking an application into small, independently deployable services
- Amazon SQS
- A managed message queue service that decouples a producer from a consumer
- Amazon SNS
- A managed pub/sub service that publishes a message to multiple subscribers at once
- Amazon EventBridge
- A managed event bus that routes events between AWS services, SaaS apps, and custom applications
- AWS Well-Architected Tool
- A free console tool that reviews a workload against the Well-Architected Framework and reports risks
Review Questions
- What are the six pillars of the AWS Well-Architected Framework?
- How does the Security pillar's "strong identity foundation" principle connect to the IAM concepts introduced in Module 4?
- What is the difference between a tightly coupled and a loosely coupled architecture?
- What trade-off does adopting a microservices architecture introduce, even as it improves resilience and scalability?
Review Questions (cont.)
- What is the difference between how Amazon SQS and Amazon SNS deliver messages to consumers?
- What does the AWS Well-Architected Tool produce after reviewing a workload, and what kind of tool is it — an automated scanner or a self-assessment framework?
- How does "disposable resources" as a cloud design principle relate to how Amazon EC2 Auto Scaling behaves, as covered in Module 6?
CLD110 AWS Academy Cloud Foundations · Module 9 · Cloud Architecture · Aligned to AWS Certified Cloud Practitioner (CLF-C02) · For instructional use · Mesa Community College