[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EK836KABTGFS5S2M3KZ8FN":3,"skill-same:01M6EK836KABTGFS5S2M3KZ8FN":105},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":28,"publishedAt":45,"linkOnly":46,"markdownContent":47,"markdownBody":48,"frontMatter":49,"refName":50,"commitSha":51,"skillDirectory":52,"forksCount":53,"repositoryHtmlUrl":54,"repositoryHomepageUrl":55,"ownerHtmlUrl":56,"ownerBlogUrl":6,"ownerDescription":57,"updatedAt":58,"install":59,"resources":72},"01M6EK836KABTGFS5S2M3KZ8FN","aws-solution-architect",null,"Expert AWS solution architecture for startups focusing on serverless, scalable, and cost-effective cloud infrastructure with modern DevOps practices and infrastructure-as-code","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",66,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44],"aws","architect","aws solution architect","architecture","infrastructure","code","cloud","infrastructure-as-code","serverless","devops","cost","expert","startups","as","Scalable","cloud infrastructure","2026-11-10 10:12:30",false,"---\nname: aws-solution-architect\ndescription: Expert AWS solution architecture for startups focusing on serverless, scalable, and cost-effective cloud infrastructure with modern DevOps practices and infrastructure-as-code\n---\n\n# AWS Solution Architect for Startups\n\nThis skill provides comprehensive AWS architecture design expertise for startup companies, emphasizing serverless technologies, scalability, cost optimization, and modern cloud-native patterns.\n\n## Capabilities\n\n- **Serverless Architecture Design**: Lambda, API Gateway, DynamoDB, EventBridge, Step Functions, AppSync\n- **Infrastructure as Code**: CloudFormation, CDK (Cloud Development Kit), Terraform templates\n- **Scalable Application Architecture**: Auto-scaling, load balancing, multi-region deployment\n- **Data & Storage Solutions**: S3, RDS Aurora Serverless, DynamoDB, ElastiCache, Neptune\n- **Event-Driven Architecture**: EventBridge, SNS, SQS, Kinesis, Lambda triggers\n- **API Design**: API Gateway (REST & WebSocket), AppSync (GraphQL), rate limiting, authentication\n- **Authentication & Authorization**: Cognito, IAM, fine-grained access control, federated identity\n- **CI\u002FCD Pipelines**: CodePipeline, CodeBuild, CodeDeploy, GitHub Actions integration\n- **Monitoring & Observability**: CloudWatch, X-Ray, CloudTrail, alarms, dashboards\n- **Cost Optimization**: Reserved instances, Savings Plans, right-sizing, budget alerts\n- **Security Best Practices**: VPC design, security groups, WAF, Secrets Manager, encryption\n- **Microservices Patterns**: Service mesh, API composition, saga patterns, CQRS\n- **Container Orchestration**: ECS Fargate, EKS (Kubernetes), App Runner\n- **Content Delivery**: CloudFront, edge locations, origin shield, caching strategies\n- **Database Migration**: DMS, schema conversion, zero-downtime migrations\n\n## Input Requirements\n\nArchitecture design requires:\n- **Application type**: Web app, mobile backend, data pipeline, microservices, SaaS platform\n- **Traffic expectations**: Users\u002Fday, requests\u002Fsecond, geographic distribution\n- **Data requirements**: Storage needs, database type, backup\u002Fretention policies\n- **Budget constraints**: Monthly spend limits, cost optimization priorities\n- **Team size & expertise**: Developer count, AWS experience level, DevOps maturity\n- **Compliance needs**: GDPR, HIPAA, SOC 2, PCI-DSS, data residency\n- **Availability requirements**: SLA targets, uptime goals, disaster recovery RPO\u002FRTO\n\nFormats accepted:\n- Text description of application requirements\n- JSON with structured architecture specifications\n- Existing architecture diagrams or documentation\n- Current AWS resource inventory (for optimization)\n\n## Output Formats\n\nResults include:\n- **Architecture diagrams**: Visual representations using draw.io or Lucidchart format\n- **CloudFormation\u002FCDK templates**: Infrastructure as Code (IaC) ready to deploy\n- **Terraform configurations**: Multi-cloud compatible infrastructure definitions\n- **Cost estimates**: Detailed monthly cost breakdown with optimization suggestions\n- **Security assessment**: Best practices checklist, compliance validation\n- **Deployment guides**: Step-by-step implementation instructions\n- **Runbooks**: Operational procedures, troubleshooting guides, disaster recovery plans\n- **Migration strategies**: Phased migration plans, rollback procedures\n\n## How to Use\n\n\"Design a serverless API backend for a mobile app with 100k users using Lambda and DynamoDB\"\n\"Create a cost-optimized architecture for a SaaS platform with multi-tenancy\"\n\"Generate CloudFormation template for a three-tier web application with auto-scaling\"\n\"Design event-driven microservices architecture using EventBridge and Step Functions\"\n\"Optimize my current AWS setup to reduce costs by 30%\"\n\n## Scripts\n\n- `architecture_designer.py`: Generates architecture patterns and service recommendations\n- `serverless_stack.py`: Creates serverless application stacks (Lambda, API Gateway, DynamoDB)\n- `cost_optimizer.py`: Analyzes AWS costs and provides optimization recommendations\n- `iac_generator.py`: Generates CloudFormation, CDK, or Terraform templates\n- `security_auditor.py`: AWS security best practices validation and compliance checks\n\n## Architecture Patterns\n\n### 1. Serverless Web Application\n**Use Case**: SaaS platforms, mobile backends, low-traffic websites\n\n**Stack**:\n- **Frontend**: S3 + CloudFront (static hosting)\n- **API**: API Gateway + Lambda\n- **Database**: DynamoDB or Aurora Serverless\n- **Auth**: Cognito\n- **CI\u002FCD**: Amplify or CodePipeline\n\n**Benefits**: Zero server management, pay-per-use, auto-scaling, low operational overhead\n\n**Cost**: $50-500\u002Fmonth for small to medium traffic\n\n### 2. Event-Driven Microservices\n**Use Case**: Complex business workflows, asynchronous processing, decoupled systems\n\n**Stack**:\n- **Events**: EventBridge (event bus)\n- **Processing**: Lambda functions or ECS Fargate\n- **Queue**: SQS (dead letter queues for failures)\n- **State Management**: Step Functions\n- **Storage**: DynamoDB, S3\n\n**Benefits**: Loose coupling, independent scaling, failure isolation, easy testing\n\n**Cost**: $100-1000\u002Fmonth depending on event volume\n\n### 3. Modern Three-Tier Application\n**Use Case**: Traditional web apps with dynamic content, e-commerce, CMS\n\n**Stack**:\n- **Load Balancer**: ALB (Application Load Balancer)\n- **Compute**: ECS Fargate or EC2 Auto Scaling\n- **Database**: RDS Aurora (MySQL\u002FPostgreSQL)\n- **Cache**: ElastiCache (Redis)\n- **CDN**: CloudFront\n- **Storage**: S3\n\n**Benefits**: Proven pattern, easy to understand, flexible scaling\n\n**Cost**: $300-2000\u002Fmonth depending on traffic and instance sizes\n\n### 4. Real-Time Data Processing\n**Use Case**: Analytics, IoT data ingestion, log processing, streaming\n\n**Stack**:\n- **Ingestion**: Kinesis Data Streams or Firehose\n- **Processing**: Lambda or Kinesis Analytics\n- **Storage**: S3 (data lake) + Athena (queries)\n- **Visualization**: QuickSight\n- **Alerting**: CloudWatch + SNS\n\n**Benefits**: Handle millions of events, real-time insights, cost-effective storage\n\n**Cost**: $200-1500\u002Fmonth depending on data volume\n\n### 5. GraphQL API Backend\n**Use Case**: Mobile apps, single-page applications, flexible data queries\n\n**Stack**:\n- **API**: AppSync (managed GraphQL)\n- **Resolvers**: Lambda or direct DynamoDB integration\n- **Database**: DynamoDB\n- **Real-time**: AppSync subscriptions (WebSocket)\n- **Auth**: Cognito or API keys\n\n**Benefits**: Single endpoint, reduce over\u002Funder-fetching, real-time subscriptions\n\n**Cost**: $50-400\u002Fmonth for moderate usage\n\n### 6. Multi-Region High Availability\n**Use Case**: Global applications, disaster recovery, compliance requirements\n\n**Stack**:\n- **DNS**: Route 53 (geolocation routing)\n- **CDN**: CloudFront with multiple origins\n- **Compute**: Multi-region Lambda or ECS\n- **Database**: DynamoDB Global Tables or Aurora Global Database\n- **Replication**: S3 cross-region replication\n\n**Benefits**: Low latency globally, disaster recovery, data sovereignty\n\n**Cost**: 1.5-2x single region costs\n\n## Best Practices\n\n### Serverless Design Principles\n1. **Stateless functions** - Store state in DynamoDB, S3, or ElastiCache\n2. **Idempotency** - Handle retries gracefully, use unique request IDs\n3. **Cold start optimization** - Use provisioned concurrency for critical paths, optimize package size\n4. **Timeout management** - Set appropriate timeouts, use Step Functions for long processes\n5. **Error handling** - Implement retry logic, dead letter queues, exponential backoff\n\n### Cost Optimization\n1. **Right-sizing** - Start small, monitor metrics, scale based on actual usage\n2. **Reserved capacity** - Use Savings Plans or Reserved Instances for predictable workloads\n3. **S3 lifecycle policies** - Transition to cheaper storage tiers (IA, Glacier)\n4. **Lambda memory optimization** - Test different memory settings for cost\u002Fperformance balance\n5. **CloudWatch log retention** - Set appropriate retention periods (7-30 days for most)\n6. **NAT Gateway alternatives** - Use VPC endpoints, consider single NAT in dev environments\n\n### Security Hardening\n1. **Principle of least privilege** - IAM roles with minimal permissions\n2. **Encryption everywhere** - At rest (KMS) and in transit (TLS\u002FSSL)\n3. **Network isolation** - Private subnets, security groups, NACLs\n4. **Secrets management** - Use Secrets Manager or Parameter Store, never hardcode\n5. **API protection** - WAF rules, rate limiting, API keys, OAuth2\n6. **Audit logging** - CloudTrail for API calls, VPC Flow Logs for network traffic\n\n### Scalability Design\n1. **Horizontal over vertical** - Scale out with more small instances vs. larger instances\n2. **Database sharding** - Partition data by tenant, geography, or time\n3. **Read replicas** - Offload read traffic from primary database\n4. **Caching layers** - CloudFront (edge), ElastiCache (application), DAX (DynamoDB)\n5. **Async processing** - Use queues (SQS) for non-critical operations\n6. **Auto-scaling policies** - Target tracking (CPU, requests) vs. step scaling\n\n### DevOps & Reliability\n1. **Infrastructure as Code** - Version control, peer review, automated testing\n2. **Blue\u002FGreen deployments** - Zero-downtime releases, instant rollback\n3. **Canary releases** - Test new versions with small traffic percentage\n4. **Health checks** - Application-level health endpoints, graceful degradation\n5. **Chaos engineering** - Test failure scenarios, validate recovery procedures\n6. **Monitoring & alerting** - Set up CloudWatch alarms for critical metrics\n\n## Service Selection Guide\n\n### Compute\n- **Lambda**: Event-driven, short-duration tasks (\u003C15 min), variable traffic\n- **Fargate**: Containerized apps, long-running processes, predictable traffic\n- **EC2**: Custom configurations, GPU\u002FFPGA needs, Windows apps\n- **App Runner**: Simple container deployment from source code\n\n### Database\n- **DynamoDB**: Key-value, document store, serverless, single-digit ms latency\n- **Aurora Serverless**: Relational DB, variable workloads, auto-scaling\n- **Aurora Standard**: High-performance relational, predictable traffic\n- **RDS**: Traditional databases (MySQL, PostgreSQL, MariaDB, SQL Server)\n- **DocumentDB**: MongoDB-compatible, document store\n- **Neptune**: Graph database for connected data\n- **Timestream**: Time-series data, IoT metrics\n\n### Storage\n- **S3 Standard**: Frequent access, low latency\n- **S3 Intelligent-Tiering**: Automatic cost optimization\n- **S3 IA (Infrequent Access)**: Backups, archives (30-day minimum)\n- **S3 Glacier**: Long-term archives, compliance\n- **EFS**: Network file system, shared storage across instances\n- **EBS**: Block storage for EC2, high IOPS\n\n### Messaging & Events\n- **EventBridge**: Event bus, loosely coupled microservices\n- **SNS**: Pub\u002Fsub, fan-out notifications\n- **SQS**: Message queuing, decoupling, buffering\n- **Kinesis**: Real-time streaming data, analytics\n- **MQ**: Managed message brokers (RabbitMQ, ActiveMQ)\n\n### API & Integration\n- **API Gateway**: REST APIs, WebSocket, throttling, caching\n- **AppSync**: GraphQL APIs, real-time subscriptions\n- **AppFlow**: SaaS integration (Salesforce, Slack, etc.)\n- **Step Functions**: Workflow orchestration, state machines\n\n## Startup-Specific Considerations\n\n### MVP (Minimum Viable Product) Architecture\n**Goal**: Launch fast, minimal infrastructure\n\n**Recommended**:\n- Amplify (full-stack deployment)\n- Lambda + API Gateway + DynamoDB\n- Cognito for auth\n- CloudFront + S3 for frontend\n\n**Cost**: $20-100\u002Fmonth\n**Setup time**: 1-3 days\n\n### Growth Stage (Scaling to 10k-100k users)\n**Goal**: Handle growth, maintain cost efficiency\n\n**Add**:\n- ElastiCache for caching\n- Aurora Serverless for complex queries\n- CloudWatch dashboards and alarms\n- CI\u002FCD pipeline (CodePipeline)\n- Multi-AZ deployment\n\n**Cost**: $500-2000\u002Fmonth\n**Migration time**: 1-2 weeks\n\n### Scale-Up (100k+ users, Series A+)\n**Goal**: Reliability, observability, global reach\n\n**Add**:\n- Multi-region deployment\n- DynamoDB Global Tables\n- Advanced monitoring (X-Ray, third-party APM)\n- WAF and Shield for DDoS protection\n- Dedicated support plan\n- Reserved instances\u002FSavings Plans\n\n**Cost**: $3000-10000\u002Fmonth\n**Migration time**: 1-3 months\n\n## Common Pitfalls to Avoid\n\n### Technical Debt\n- **Over-engineering early** - Don't build for 10M users when you have 100\n- **Under-monitoring** - Set up basic monitoring from day one\n- **Ignoring costs** - Enable Cost Explorer and billing alerts immediately\n- **Single region dependency** - Plan for multi-region from start\n\n### Security Mistakes\n- **Public S3 buckets** - Use bucket policies, block public access\n- **Overly permissive IAM** - Avoid \"*\" permissions, use specific resources\n- **Hardcoded credentials** - Use IAM roles, Secrets Manager\n- **Unencrypted data** - Enable encryption by default\n\n### Performance Issues\n- **No caching** - Add CloudFront, ElastiCache early\n- **Inefficient queries** - Use indexes, avoid scans in DynamoDB\n- **Large Lambda packages** - Use layers, minimize dependencies\n- **N+1 queries** - Implement DataLoader pattern, batch operations\n\n### Cost Surprises\n- **Undeleted resources** - Tag everything, review regularly\n- **Data transfer costs** - Keep traffic within same AZ\u002Fregion when possible\n- **NAT Gateway charges** - Use VPC endpoints for AWS services\n- **CloudWatch Logs accumulation** - Set retention policies\n\n## Compliance & Governance\n\n### Data Residency\n- Use specific regions (eu-west-1 for GDPR)\n- Enable S3 bucket replication restrictions\n- Configure Route 53 geolocation routing\n\n### HIPAA Compliance\n- Use BAA-eligible services only\n- Enable encryption at rest and in transit\n- Implement audit logging (CloudTrail)\n- Configure VPC with private subnets\n\n### SOC 2 \u002F ISO 27001\n- Enable AWS Config for compliance rules\n- Use AWS Audit Manager\n- Implement least privilege access\n- Regular security assessments\n\n## Limitations\n\n- **Lambda limitations**: 15-minute execution limit, 10GB memory max, cold start latency\n- **API Gateway limits**: 29-second timeout, 10MB payload size\n- **DynamoDB limits**: 400KB item size, eventually consistent reads by default\n- **Regional availability**: Not all services available in all regions\n- **Vendor lock-in**: Some serverless services are AWS-specific (consider abstraction layers)\n- **Learning curve**: Requires AWS expertise, DevOps knowledge\n- **Debugging complexity**: Distributed systems harder to troubleshoot than monoliths\n\n## Helpful Resources\n\n- **AWS Well-Architected Framework**: https:\u002F\u002Faws.amazon.com\u002Farchitecture\u002Fwell-architected\u002F\n- **AWS Architecture Center**: https:\u002F\u002Faws.amazon.com\u002Farchitecture\u002F\n- **Serverless Land**: https:\u002F\u002Fserverlessland.com\u002F\n- **AWS Pricing Calculator**: https:\u002F\u002Fcalculator.aws\u002F\n- **AWS Cost Explorer**: Track and analyze spending\n- **AWS Trusted Advisor**: Automated best practice checks\n- **CloudFormation Templates**: https:\u002F\u002Fgithub.com\u002Fawslabs\u002Faws-cloudformation-templates\n- **AWS CDK Examples**: https:\u002F\u002Fgithub.com\u002Faws-samples\u002Faws-cdk-examples\n","# AWS Solution Architect for Startups\n\nThis skill provides comprehensive AWS architecture design expertise for startup companies, emphasizing serverless technologies, scalability, cost optimization, and modern cloud-native patterns.\n\n## Capabilities\n\n- **Serverless Architecture Design**: Lambda, API Gateway, DynamoDB, EventBridge, Step Functions, AppSync\n- **Infrastructure as Code**: CloudFormation, CDK (Cloud Development Kit), Terraform templates\n- **Scalable Application Architecture**: Auto-scaling, load balancing, multi-region deployment\n- **Data & Storage Solutions**: S3, RDS Aurora Serverless, DynamoDB, ElastiCache, Neptune\n- **Event-Driven Architecture**: EventBridge, SNS, SQS, Kinesis, Lambda triggers\n- **API Design**: API Gateway (REST & WebSocket), AppSync (GraphQL), rate limiting, authentication\n- **Authentication & Authorization**: Cognito, IAM, fine-grained access control, federated identity\n- **CI\u002FCD Pipelines**: CodePipeline, CodeBuild, CodeDeploy, GitHub Actions integration\n- **Monitoring & Observability**: CloudWatch, X-Ray, CloudTrail, alarms, dashboards\n- **Cost Optimization**: Reserved instances, Savings Plans, right-sizing, budget alerts\n- **Security Best Practices**: VPC design, security groups, WAF, Secrets Manager, encryption\n- **Microservices Patterns**: Service mesh, API composition, saga patterns, CQRS\n- **Container Orchestration**: ECS Fargate, EKS (Kubernetes), App Runner\n- **Content Delivery**: CloudFront, edge locations, origin shield, caching strategies\n- **Database Migration**: DMS, schema conversion, zero-downtime migrations\n\n## Input Requirements\n\nArchitecture design requires:\n- **Application type**: Web app, mobile backend, data pipeline, microservices, SaaS platform\n- **Traffic expectations**: Users\u002Fday, requests\u002Fsecond, geographic distribution\n- **Data requirements**: Storage needs, database type, backup\u002Fretention policies\n- **Budget constraints**: Monthly spend limits, cost optimization priorities\n- **Team size & expertise**: Developer count, AWS experience level, DevOps maturity\n- **Compliance needs**: GDPR, HIPAA, SOC 2, PCI-DSS, data residency\n- **Availability requirements**: SLA targets, uptime goals, disaster recovery RPO\u002FRTO\n\nFormats accepted:\n- Text description of application requirements\n- JSON with structured architecture specifications\n- Existing architecture diagrams or documentation\n- Current AWS resource inventory (for optimization)\n\n## Output Formats\n\nResults include:\n- **Architecture diagrams**: Visual representations using draw.io or Lucidchart format\n- **CloudFormation\u002FCDK templates**: Infrastructure as Code (IaC) ready to deploy\n- **Terraform configurations**: Multi-cloud compatible infrastructure definitions\n- **Cost estimates**: Detailed monthly cost breakdown with optimization suggestions\n- **Security assessment**: Best practices checklist, compliance validation\n- **Deployment guides**: Step-by-step implementation instructions\n- **Runbooks**: Operational procedures, troubleshooting guides, disaster recovery plans\n- **Migration strategies**: Phased migration plans, rollback procedures\n\n## How to Use\n\n\"Design a serverless API backend for a mobile app with 100k users using Lambda and DynamoDB\"\n\"Create a cost-optimized architecture for a SaaS platform with multi-tenancy\"\n\"Generate CloudFormation template for a three-tier web application with auto-scaling\"\n\"Design event-driven microservices architecture using EventBridge and Step Functions\"\n\"Optimize my current AWS setup to reduce costs by 30%\"\n\n## Scripts\n\n- `architecture_designer.py`: Generates architecture patterns and service recommendations\n- `serverless_stack.py`: Creates serverless application stacks (Lambda, API Gateway, DynamoDB)\n- `cost_optimizer.py`: Analyzes AWS costs and provides optimization recommendations\n- `iac_generator.py`: Generates CloudFormation, CDK, or Terraform templates\n- `security_auditor.py`: AWS security best practices validation and compliance checks\n\n## Architecture Patterns\n\n### 1. Serverless Web Application\n**Use Case**: SaaS platforms, mobile backends, low-traffic websites\n\n**Stack**:\n- **Frontend**: S3 + CloudFront (static hosting)\n- **API**: API Gateway + Lambda\n- **Database**: DynamoDB or Aurora Serverless\n- **Auth**: Cognito\n- **CI\u002FCD**: Amplify or CodePipeline\n\n**Benefits**: Zero server management, pay-per-use, auto-scaling, low operational overhead\n\n**Cost**: $50-500\u002Fmonth for small to medium traffic\n\n### 2. Event-Driven Microservices\n**Use Case**: Complex business workflows, asynchronous processing, decoupled systems\n\n**Stack**:\n- **Events**: EventBridge (event bus)\n- **Processing**: Lambda functions or ECS Fargate\n- **Queue**: SQS (dead letter queues for failures)\n- **State Management**: Step Functions\n- **Storage**: DynamoDB, S3\n\n**Benefits**: Loose coupling, independent scaling, failure isolation, easy testing\n\n**Cost**: $100-1000\u002Fmonth depending on event volume\n\n### 3. Modern Three-Tier Application\n**Use Case**: Traditional web apps with dynamic content, e-commerce, CMS\n\n**Stack**:\n- **Load Balancer**: ALB (Application Load Balancer)\n- **Compute**: ECS Fargate or EC2 Auto Scaling\n- **Database**: RDS Aurora (MySQL\u002FPostgreSQL)\n- **Cache**: ElastiCache (Redis)\n- **CDN**: CloudFront\n- **Storage**: S3\n\n**Benefits**: Proven pattern, easy to understand, flexible scaling\n\n**Cost**: $300-2000\u002Fmonth depending on traffic and instance sizes\n\n### 4. Real-Time Data Processing\n**Use Case**: Analytics, IoT data ingestion, log processing, streaming\n\n**Stack**:\n- **Ingestion**: Kinesis Data Streams or Firehose\n- **Processing**: Lambda or Kinesis Analytics\n- **Storage**: S3 (data lake) + Athena (queries)\n- **Visualization**: QuickSight\n- **Alerting**: CloudWatch + SNS\n\n**Benefits**: Handle millions of events, real-time insights, cost-effective storage\n\n**Cost**: $200-1500\u002Fmonth depending on data volume\n\n### 5. GraphQL API Backend\n**Use Case**: Mobile apps, single-page applications, flexible data queries\n\n**Stack**:\n- **API**: AppSync (managed GraphQL)\n- **Resolvers**: Lambda or direct DynamoDB integration\n- **Database**: DynamoDB\n- **Real-time**: AppSync subscriptions (WebSocket)\n- **Auth**: Cognito or API keys\n\n**Benefits**: Single endpoint, reduce over\u002Funder-fetching, real-time subscriptions\n\n**Cost**: $50-400\u002Fmonth for moderate usage\n\n### 6. Multi-Region High Availability\n**Use Case**: Global applications, disaster recovery, compliance requirements\n\n**Stack**:\n- **DNS**: Route 53 (geolocation routing)\n- **CDN**: CloudFront with multiple origins\n- **Compute**: Multi-region Lambda or ECS\n- **Database**: DynamoDB Global Tables or Aurora Global Database\n- **Replication**: S3 cross-region replication\n\n**Benefits**: Low latency globally, disaster recovery, data sovereignty\n\n**Cost**: 1.5-2x single region costs\n\n## Best Practices\n\n### Serverless Design Principles\n1. **Stateless functions** - Store state in DynamoDB, S3, or ElastiCache\n2. **Idempotency** - Handle retries gracefully, use unique request IDs\n3. **Cold start optimization** - Use provisioned concurrency for critical paths, optimize package size\n4. **Timeout management** - Set appropriate timeouts, use Step Functions for long processes\n5. **Error handling** - Implement retry logic, dead letter queues, exponential backoff\n\n### Cost Optimization\n1. **Right-sizing** - Start small, monitor metrics, scale based on actual usage\n2. **Reserved capacity** - Use Savings Plans or Reserved Instances for predictable workloads\n3. **S3 lifecycle policies** - Transition to cheaper storage tiers (IA, Glacier)\n4. **Lambda memory optimization** - Test different memory settings for cost\u002Fperformance balance\n5. **CloudWatch log retention** - Set appropriate retention periods (7-30 days for most)\n6. **NAT Gateway alternatives** - Use VPC endpoints, consider single NAT in dev environments\n\n### Security Hardening\n1. **Principle of least privilege** - IAM roles with minimal permissions\n2. **Encryption everywhere** - At rest (KMS) and in transit (TLS\u002FSSL)\n3. **Network isolation** - Private subnets, security groups, NACLs\n4. **Secrets management** - Use Secrets Manager or Parameter Store, never hardcode\n5. **API protection** - WAF rules, rate limiting, API keys, OAuth2\n6. **Audit logging** - CloudTrail for API calls, VPC Flow Logs for network traffic\n\n### Scalability Design\n1. **Horizontal over vertical** - Scale out with more small instances vs. larger instances\n2. **Database sharding** - Partition data by tenant, geography, or time\n3. **Read replicas** - Offload read traffic from primary database\n4. **Caching layers** - CloudFront (edge), ElastiCache (application), DAX (DynamoDB)\n5. **Async processing** - Use queues (SQS) for non-critical operations\n6. **Auto-scaling policies** - Target tracking (CPU, requests) vs. step scaling\n\n### DevOps & Reliability\n1. **Infrastructure as Code** - Version control, peer review, automated testing\n2. **Blue\u002FGreen deployments** - Zero-downtime releases, instant rollback\n3. **Canary releases** - Test new versions with small traffic percentage\n4. **Health checks** - Application-level health endpoints, graceful degradation\n5. **Chaos engineering** - Test failure scenarios, validate recovery procedures\n6. **Monitoring & alerting** - Set up CloudWatch alarms for critical metrics\n\n## Service Selection Guide\n\n### Compute\n- **Lambda**: Event-driven, short-duration tasks (\u003C15 min), variable traffic\n- **Fargate**: Containerized apps, long-running processes, predictable traffic\n- **EC2**: Custom configurations, GPU\u002FFPGA needs, Windows apps\n- **App Runner**: Simple container deployment from source code\n\n### Database\n- **DynamoDB**: Key-value, document store, serverless, single-digit ms latency\n- **Aurora Serverless**: Relational DB, variable workloads, auto-scaling\n- **Aurora Standard**: High-performance relational, predictable traffic\n- **RDS**: Traditional databases (MySQL, PostgreSQL, MariaDB, SQL Server)\n- **DocumentDB**: MongoDB-compatible, document store\n- **Neptune**: Graph database for connected data\n- **Timestream**: Time-series data, IoT metrics\n\n### Storage\n- **S3 Standard**: Frequent access, low latency\n- **S3 Intelligent-Tiering**: Automatic cost optimization\n- **S3 IA (Infrequent Access)**: Backups, archives (30-day minimum)\n- **S3 Glacier**: Long-term archives, compliance\n- **EFS**: Network file system, shared storage across instances\n- **EBS**: Block storage for EC2, high IOPS\n\n### Messaging & Events\n- **EventBridge**: Event bus, loosely coupled microservices\n- **SNS**: Pub\u002Fsub, fan-out notifications\n- **SQS**: Message queuing, decoupling, buffering\n- **Kinesis**: Real-time streaming data, analytics\n- **MQ**: Managed message brokers (RabbitMQ, ActiveMQ)\n\n### API & Integration\n- **API Gateway**: REST APIs, WebSocket, throttling, caching\n- **AppSync**: GraphQL APIs, real-time subscriptions\n- **AppFlow**: SaaS integration (Salesforce, Slack, etc.)\n- **Step Functions**: Workflow orchestration, state machines\n\n## Startup-Specific Considerations\n\n### MVP (Minimum Viable Product) Architecture\n**Goal**: Launch fast, minimal infrastructure\n\n**Recommended**:\n- Amplify (full-stack deployment)\n- Lambda + API Gateway + DynamoDB\n- Cognito for auth\n- CloudFront + S3 for frontend\n\n**Cost**: $20-100\u002Fmonth\n**Setup time**: 1-3 days\n\n### Growth Stage (Scaling to 10k-100k users)\n**Goal**: Handle growth, maintain cost efficiency\n\n**Add**:\n- ElastiCache for caching\n- Aurora Serverless for complex queries\n- CloudWatch dashboards and alarms\n- CI\u002FCD pipeline (CodePipeline)\n- Multi-AZ deployment\n\n**Cost**: $500-2000\u002Fmonth\n**Migration time**: 1-2 weeks\n\n### Scale-Up (100k+ users, Series A+)\n**Goal**: Reliability, observability, global reach\n\n**Add**:\n- Multi-region deployment\n- DynamoDB Global Tables\n- Advanced monitoring (X-Ray, third-party APM)\n- WAF and Shield for DDoS protection\n- Dedicated support plan\n- Reserved instances\u002FSavings Plans\n\n**Cost**: $3000-10000\u002Fmonth\n**Migration time**: 1-3 months\n\n## Common Pitfalls to Avoid\n\n### Technical Debt\n- **Over-engineering early** - Don't build for 10M users when you have 100\n- **Under-monitoring** - Set up basic monitoring from day one\n- **Ignoring costs** - Enable Cost Explorer and billing alerts immediately\n- **Single region dependency** - Plan for multi-region from start\n\n### Security Mistakes\n- **Public S3 buckets** - Use bucket policies, block public access\n- **Overly permissive IAM** - Avoid \"*\" permissions, use specific resources\n- **Hardcoded credentials** - Use IAM roles, Secrets Manager\n- **Unencrypted data** - Enable encryption by default\n\n### Performance Issues\n- **No caching** - Add CloudFront, ElastiCache early\n- **Inefficient queries** - Use indexes, avoid scans in DynamoDB\n- **Large Lambda packages** - Use layers, minimize dependencies\n- **N+1 queries** - Implement DataLoader pattern, batch operations\n\n### Cost Surprises\n- **Undeleted resources** - Tag everything, review regularly\n- **Data transfer costs** - Keep traffic within same AZ\u002Fregion when possible\n- **NAT Gateway charges** - Use VPC endpoints for AWS services\n- **CloudWatch Logs accumulation** - Set retention policies\n\n## Compliance & Governance\n\n### Data Residency\n- Use specific regions (eu-west-1 for GDPR)\n- Enable S3 bucket replication restrictions\n- Configure Route 53 geolocation routing\n\n### HIPAA Compliance\n- Use BAA-eligible services only\n- Enable encryption at rest and in transit\n- Implement audit logging (CloudTrail)\n- Configure VPC with private subnets\n\n### SOC 2 \u002F ISO 27001\n- Enable AWS Config for compliance rules\n- Use AWS Audit Manager\n- Implement least privilege access\n- Regular security assessments\n\n## Limitations\n\n- **Lambda limitations**: 15-minute execution limit, 10GB memory max, cold start latency\n- **API Gateway limits**: 29-second timeout, 10MB payload size\n- **DynamoDB limits**: 400KB item size, eventually consistent reads by default\n- **Regional availability**: Not all services available in all regions\n- **Vendor lock-in**: Some serverless services are AWS-specific (consider abstraction layers)\n- **Learning curve**: Requires AWS expertise, DevOps knowledge\n- **Debugging complexity**: Distributed systems harder to troubleshoot than monoliths\n\n## Helpful Resources\n\n- **AWS Well-Architected Framework**: https:\u002F\u002Faws.amazon.com\u002Farchitecture\u002Fwell-architected\u002F\n- **AWS Architecture Center**: https:\u002F\u002Faws.amazon.com\u002Farchitecture\u002F\n- **Serverless Land**: https:\u002F\u002Fserverlessland.com\u002F\n- **AWS Pricing Calculator**: https:\u002F\u002Fcalculator.aws\u002F\n- **AWS Cost Explorer**: Track and analyze spending\n- **AWS Trusted Advisor**: Automated best practice checks\n- **CloudFormation Templates**: https:\u002F\u002Fgithub.com\u002Fawslabs\u002Faws-cloudformation-templates\n- **AWS CDK Examples**: https:\u002F\u002Fgithub.com\u002Faws-samples\u002Faws-cdk-examples\n",{"name":5,"description":7},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":60,"prompt":70,"zipAvailable":71},[61,64,67],{"tool":62,"command":63},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill aws-solution-architect",{"tool":65,"command":66},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill aws-solution-architect",{"tool":68,"command":69},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill aws-solution-architect","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002FSKILL.md",true,[73,79,83,89,93,97,101],{"path":74,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"architecture_designer.py","SCRIPT","脚本",35618,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002Farchitecture_designer.py",{"path":80,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":81,"sourceHtmlUrl":82},"cost_optimizer.py",15618,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002Fcost_optimizer.py",{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"expected_output.json","REFERENCE","参考文档",1567,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002Fexpected_output.json",{"path":90,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":91,"sourceHtmlUrl":92},"HOW_TO_USE.md",9147,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002FHOW_TO_USE.md",{"path":94,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":95,"sourceHtmlUrl":96},"sample_input.json",426,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002Fsample_input.json",{"path":98,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":99,"sourceHtmlUrl":100},"serverless_stack.py",17798,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002Fserverless_stack.py",{"path":102,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":103,"sourceHtmlUrl":104},"skill-report.json",10620,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Falirezarezvani\u002Faws-solution-architect\u002Fskill-report.json",[106,118,128,137,143,150],{"skillNo":107,"name":108,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":109,"categories":110,"keywords":114,"publishedAt":45},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[111],{"categoryNo":112,"categoryName":113,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[115,116,117],"model","model hierarchy","model hierarchy skill",{"skillNo":119,"name":120,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":121,"categories":122,"keywords":124,"publishedAt":45},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[123],{"categoryNo":112,"categoryName":113,"taxonomyType":21,"taxonomyTypeDesc":22},[125,126,127],"MCP","zoom","zoom mcp",{"skillNo":129,"name":130,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":133,"publishedAt":45},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[134,135,136,126],"sdk","zoom apps sdk","apps",{"skillNo":138,"name":139,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":140,"categories":141,"keywords":142,"publishedAt":45},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[139],{"skillNo":144,"name":145,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":146,"categories":147,"keywords":149,"publishedAt":45},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[148],{"categoryNo":112,"categoryName":113,"taxonomyType":21,"taxonomyTypeDesc":22},[145],{"skillNo":151,"name":152,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":153,"categories":154,"keywords":155,"publishedAt":45},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[152]]