AWS Architecture Guide

This guide teaches AWS as an operating model for cloud architecture rather than a catalog of services. It connects AWS vocabulary to durable responsibilities, trade-offs, realistic scenarios, and clear architecture conversations.

Who This Book Is For

The book is for cloud engineers growing into architecture roles, solution architects revising AWS fundamentals, practitioners moving from Azure or GCP, and readers who want to explain AWS decisions with more confidence.

How to Use This Book

Read all five parts for the complete progression from AWS foundations through enterprise controls, networking, workload selection, patterns, and conversation practice. If you already know the fundamentals, begin with the part closest to your current design problem.

Start Reading

Start with Part I: Cloud Architecture Spine With AWS

Parts

Part I: Cloud Architecture Spine With AWS

Understand how AWS places responsibilities across infrastructure, service models, and the Well-Architected decision framework.

Part II: Enterprise Foundation

Design identity, federation, account structure, landing zones, governance, security, and cost ownership for many teams.

Part III: Networking and Secure Connectivity

Build intentional network paths from VPC fundamentals through hybrid transit, private access, edge protection, and inspection.

Part IV: Workload Service Selection

Choose compute, data, integration, and operational services from workload requirements and ownership constraints.

Part V: Architecture Patterns, Migration, and Conversation Practice

Apply AWS decisions to modernization, resilience, SaaS, scenario design, and stakeholder communication.

Complete Table of Contents

• Part I: Cloud Architecture Spine With AWS

  • Cloud Architecture Responsibilities in AWS

  • AWS Global Infrastructure and Shared Responsibility

  • AWS Well-Architected as a Decision Model

• Part II: Enterprise Foundation

  • Identity and Access with IAM

  • Enterprise Identity, Federation, and Workload Access

  • AWS Account Strategy, Organizations, and Landing Zones

  • Governance, Policy, Security, and Cost Ownership

• Part III: Networking and Secure Connectivity

  • VPC, Subnets, Routing, and IP Planning

  • Hybrid Connectivity and Transit Architecture

  • Network Security, Edge Protection, and Private Access

• Part IV: Workload Service Selection

  • Compute Selection: EC2, Containers, and Serverless

  • Storage and Data Selection

  • Integration, Events, and Workflow Selection

  • Observability, Automation, and Operational Readiness

• Part V: Architecture Patterns, Migration, and Conversation Practice

  • Migration and Modernization Decisions

  • High Availability, Disaster Recovery, and Cost Trade-Offs

  • SaaS and Multi-Tenant Architecture

  • AWS Architecture Brainstorming Scenarios

  • Leadership Principles for Architecture Conversations