A cloud architecture review is a short, structured conversation that finds expensive mistakes before they ship. Security, availability and cost are often the same conversation.
The questions
- What happens if this component fails? Is there a single point of failure?
- What happens if this identity is compromised? How far can it reach?
- What happens if this subnet is exposed? What is the blast radius?
- Can we restore this service? What are the RTO and RPO?
- What does this cost at 10x traffic? Does the design still make sense?
- Who owns this at 03:00? Is there a runbook and an on-call path?
Assume breach in the diagram
Draw the data flow, then mark trust boundaries. Ask what an attacker sees from each boundary. A public load balancer, a queue and a database may look simple until you mark who can reach what.
Continue this lesson in the player
A free account unlocks the full lesson, the five-question knowledge check, progress tracking, notes and the completion certificate.