aws

Scope

Covers the AWS control plane and the architecture decisions that sit on top of it: identity (IAM policy evaluation, permissions boundaries, trust policies, SCPs, Organizations, STS), serverless compute and integration (Lambda, API Gateway, Step Functions, SQS, EventBridge), deployment through AWS's own tooling (CloudFormation, SAM, CDK) including stack recovery and safe refactoring, managed data service selection and its quotas, networking as it affects cost and reachability (VPC endpoints, NAT, cross-AZ), the EKS and ECS control planes, the CloudWatch product surface, Well-Architected trade-offs, and cost analysis.

Not covered: