AWS Architecture Guide

Platform Operating Model Scenario

Goal

This section applies operational readiness to a platform team standardizing deployment, monitoring, audit, and cost visibility across many AWS accounts.

The goal is to make good operations easier for every workload team without turning the platform team into a bottleneck.

The Short Version

Platform standards should standardize the rails, not own every train.

Platform team:
  account baseline / logging / pipeline templates / tags / guardrails

Workload team:
  app signals / runbooks / deployment ownership / cost review / incident response

The platform team creates the paved road. Workload teams still own the workloads they drive on it.

Scenario

A company has many AWS accounts. Some teams deploy by hand. Some have pipelines. Logs are inconsistent. CloudTrail exists in some accounts but not others. Tags are unreliable. Cost allocation is unclear. During incidents, nobody knows which dashboard, owner, or runbook applies.

The company asks for an operating model, not just another tool.

What To Standardize Centrally

The platform team should standardize the common foundations:

  • Account baseline and guardrails.

  • Central CloudTrail and audit logging pattern.

  • Baseline CloudWatch metrics, log retention, and cross-account visibility.

  • AWS Config rules or equivalent configuration evidence.

  • Pipeline templates and deployment-role patterns.

  • Infrastructure-as-code modules or constructs for common services.

  • Tagging standards and cost allocation expectations.

  • Budget and cost dashboard patterns.

  • Security and incident-response integration points.

  • Production readiness checklist.

These standards reduce repeated design work and make evidence easier to collect across accounts.

What Workload Teams Still Own

Workload teams should own the behavior of their systems:

  • Application metrics and business health signals.

  • Service-level objectives or reliability targets where used.

  • Runbooks for application-specific failures.

  • Deployment decisions and rollback readiness.

  • Dependency maps.

  • Data restore expectations.

  • Queue, event, and workflow failure handling.

  • Cost review for workload-specific choices.

  • Incident response and post-incident improvements.

The platform can provide templates, dashboards, and guardrails. It cannot know every business rule inside every application.

A Practical Readiness Model

A production readiness review might ask:

AreaPlatform StandardWorkload Evidence
DeploymentApproved pipeline pattern and deployment roles.Service uses pipeline, tests, verification, and rollback.
ObservabilityCentral log and metric standards.Application dashboards, alarms, traces, and owner actions.
AuditOrganization-wide CloudTrail and retention.Team can investigate workload-relevant changes.
ConfigurationBaseline Config rules or equivalent checks.Exceptions are documented and owned.
CostRequired tags, budgets, and dashboards.Team reviews spend and explains growth.
Incident responseSeverity model and escalation process.Runbooks and on-call ownership exist.

This makes readiness visible without turning it into a vague document.

Avoiding Platform Extremes

Two failures are common.

One extreme centralizes everything. Workload teams wait for the platform team to make every change, and delivery slows down. The other extreme decentralizes everything. Teams move quickly, but governance, audit evidence, cost visibility, and operational consistency disappear.

A good platform operating model gives teams safe defaults and clear responsibilities:

  • Centralize shared controls and evidence.

  • Standardize repeatable patterns.

  • Automate the boring parts.

  • Let workload teams own application behavior.

  • Review exceptions explicitly.

  • Improve standards after incidents.

That is enablement, not gatekeeping.

Common Mistakes

  • Centralizing everything so workload teams cannot move.

  • Decentralizing everything so governance and evidence disappear.

  • Treating readiness as a document instead of automated standards and owned practices.

  • Creating platform standards without measuring whether teams can use them.

  • Ignoring cost allocation until finance asks hard questions.

If Someone Asks You

How would you standardize operational readiness across many AWS accounts?

A good answer is:

I would create central platform standards for account baselines, logging, CloudTrail, configuration evidence, pipeline templates, deployment roles, tagging, budgets, dashboards, and readiness checks. Workload teams would still own application metrics, runbooks, deployment decisions, incident response, dependencies, restore expectations, and cost review. The platform should make good operations the default without owning every application decision.

What You Should Remember

A platform operating model should standardize the rails, not own every train.

Questions to Check Your Understanding

  1. Which readiness responsibilities usually belong to a platform team?

  2. Which readiness responsibilities must remain with workload teams?

  3. How does multi-account governance affect operations?