Skip to content
Getting Digital

Cloud Computing

Cloud architecture and the well-architected pillars

Cloud architecture is the craft of saying no to most of the catalogue. An architect weighs reliability, performance, security, cost and operability against each other for one workload, and the design that wins is the one whose compromises are written down and agreed. The Well-Architected pillars give those compromises names; the architect exams check whether you can make them under pressure.

Why this topic exists: Designing for reliability, performance, security and cost is what the architect exams certify (SAA-C03's four domains; AZ-305; Professional Cloud Architect) and what the Well-Architected Framework's six pillars name.

AWS organises its advice to architects into six pillars, and although the vocabulary is Amazon's, the questions apply on every platform. Microsoft and Google publish comparable frameworks of their own. The pillars are useful less as a checklist than as a reminder that improving one quality nearly always costs another.

PillarThe question it asksWhat it usually costs
Operational excellenceCan the team run, observe and improve this without heroics?Time spent on automation and runbooks before launch
SecurityWho and what can reach the data, and how would we know?Friction for users and developers
ReliabilityWhat happens when a component, a zone or a region fails?Duplicated resources and more complex deployments
Performance efficiencyAre we using the right kind and amount of resource for the load?Ongoing measurement and tuning
Cost optimisationAre we paying only for what delivers value?Engineering effort and sometimes resilience
SustainabilityHow much energy and hardware does this workload consume?Occasionally speed or convenience

How the exams frame the job

The Solutions Architect Associate exam guide states that it tests design against the Well-Architected Framework and splits its content into four domains: secure, resilient, high-performing and cost-optimised architectures. Each question describes a requirement and asks which combination of services meets it best, so the skill on trial is elimination: spotting the option that is correct but too expensive, or cheap but fragile. The expert and professional tiers change the scenario, not the principle. AZ-305 expects one design that settles identity, data, infrastructure and continuity together; SAP-C02 and Google's Professional Cloud Architect add existing systems, regulators and budgets to the stem.

Reliability has a price tag

Before designing for multiple regions, ask how long the business can be down and how much data it can lose. Many workloads are served well by several availability zones in one region, at a fraction of the effort a second region demands.

Good architects also write things down. A short decision record for each significant choice, stating the options considered, the one chosen and the pillar it sacrificed, lets a successor understand why the system looks the way it does. It also turns vague requirements into measurable ones: a recovery time, an acceptable data loss, a latency budget, a monthly spending ceiling. Without such figures, every design review becomes an argument about taste.

Where newcomers misjudge the role

The commonest mistake is treating architecture as service selection. Knowing that a queue decouples two components is exam knowledge; knowing whether this team can operate that queue at three in the morning is architecture. The second is designing for scale nobody has asked for, which buys complexity with the reliability budget. The third is skipping the review: AWS offers a free Well-Architected Tool in its console for assessing a workload against the pillars, and walking a design through such questions with the people who will run it catches more problems than any diagram. Architects usually come from development or administration for exactly this reason. They have operated the kind of system they now design, and they know which parts of it fail. The neighbouring topics on networking, storage and databases and migration supply the building blocks those decisions are made from.

Next to this topic

Concepts to know

Glossary entries with the reason each one matters here.

  • Load Balancing

    The building block of resilience and scaling.

  • Uptime & SLA

    What the architecture is designed to meet, and what the provider promises.

  • Caching

    Performance efficiency in one word.

  • CDN

    Where the performance and cost pillars meet at the edge.

Certifications that test it

Vendor exams and free certificates; facts, cost and the preparation path are on each page, and the certifications hub has them all.

Tools of the trade

Frequently asked

Do I need to be a developer to become a cloud architect?
Not necessarily, but you need to have built or run real systems. Most architects come from development, system administration or networking, and the associate exam itself recommends at least a year of hands-on design experience on the platform.
Is the Well-Architected Framework only for AWS?
The pillars are AWS's, but the questions behind them are platform-neutral, and Azure and Google Cloud publish similar frameworks. Learning one set of pillars well makes the others easy to read.
Which architect exam should I take first?
The associate architect exam on the platform you use. On AWS that is SAA-C03, which has no prerequisite. On Azure the architect credential requires the Azure Administrator certificate, so the route begins with AZ-104.
How is multi-AZ different from multi-region?
Multi-AZ spreads a workload across isolated data centres in one region and protects against a local outage with modest effort. Multi-region copies it to a distant area, which protects against a regional disaster but brings data replication, latency and failover questions that add a great deal of design work.

Courses in the directory

85 courses are filed here; the top 6 by our ranking, details and the provider link on each course page.

Browse the directory shelf

Last reviewed 26 September 2026 · Getting Digital