Skip to content

Scenario 03 · Cloud Concepts · CLF-C02

Review a Cloud Design

Review a working cloud workload through the six AWS Well-Architected pillars and turn vague approval into a repeatable improvement conversation.

8 min read
Scenario coverageTasks 1.2

Concepts

  • operational excellence
  • security
  • reliability
  • performance efficiency
  • cost optimization
  • sustainability

Manifest services

  • AWS Well-Architected Tool

Situation and constraints

Birch & Co. has moved its order application to AWS. Customers can place orders, dashboards load, and the team declares the project successful because “it works.” A closer look reveals a less comfortable picture:

  • production changes are made manually and are difficult to repeat;
  • several people have broader permissions than their jobs require;
  • one failure can interrupt an important part of the workload;
  • the team selected large resources without measuring demand;
  • no one regularly reviews idle resources or explains cost changes; and
  • old test data and unnecessary processing continue to consume resources.

None of these facts proves that the workload will fail tomorrow. Together, they show why “does it work?” is too narrow a design review.

The AWS Well-Architected Framework gives Birch a consistent way to examine cloud workloads through six pillars. At Cloud Practitioner depth, you do not need to memorize every design principle. You do need to recognize what each pillar is trying to improve and how a structured review changes the team's decisions.

The decision to make

Birch must decide whether to approve the workload as-is or review it against AWS best practices, document risks, and prioritize improvements.

The useful choice is not “perfect architecture or failure.” Every real workload contains tradeoffs. A small internal tool and a revenue-critical ordering system may accept different levels of cost, recovery capability, and operational effort. The Well-Architected approach helps the team make those choices deliberately instead of allowing accidental design decisions to become permanent.

A good review asks six related questions:

  1. Can we operate and improve the workload effectively?
  2. Are systems, data, and assets protected?
  3. Can the workload perform its intended function and recover from failure?
  4. Are resources used efficiently as demand and technology change?
  5. Are we delivering business value at an appropriate cost?
  6. Are we reducing unnecessary energy and resource use?

These are the six pillars, expressed as business conversations rather than an architecture checklist.

A practical mental model

Think of a building inspection performed by six specialists. One checks operating procedures, one checks security, one checks structural resilience, one checks how efficiently the equipment works, one checks cost, and one checks environmental impact. Passing one specialist's review does not answer the others.

The AWS Well-Architected pillars work the same way:

  • Operational excellence is the ability to support development, run workloads effectively, gain insight into operations, and continually improve. For Birch, manual and undocumented changes are a warning sign.
  • Security focuses on protecting data, systems, and assets. Broad permissions and weak identity practices belong here.
  • Reliability is the ability to perform the expected function correctly and consistently, including recovery from disruptions. Single points of failure and untested recovery plans belong here.
  • Performance efficiency means using computing resources efficiently as requirements and technologies evolve. Oversized resources, a poor service fit, or failure to adjust to demand belong here.
  • Cost optimization means delivering business value while avoiding unnecessary cost. Idle resources and unexplained spending belong here.
  • Sustainability focuses on minimizing the environmental impact of running cloud workloads. Avoiding waste, using efficient services, and matching resources to need can contribute.

The pillars overlap. Right-sizing may improve performance efficiency, cost optimization, and sustainability. Automation may improve operational excellence and reliability. The value of the framework is not that every concern fits into exactly one box; it is that important perspectives are not silently skipped.

Compare the options without hiding the tradeoffs

Approve because the application works

This is fast, but it treats present functionality as proof of future fitness. It does not expose operational risk, excess access, recovery gaps, inefficient capacity, uncontrolled spend, or resource waste.

Demand maximum scores in every pillar

This sounds responsible but can ignore business context. More redundancy can improve reliability while increasing cost and operational complexity. A review should surface tradeoffs and risks, not pretend every workload needs the most elaborate possible design.

Perform a structured, recurring review

This gives Birch a shared vocabulary and a record of decisions. The team can identify high-risk issues, assign owners, prioritize changes, and review again as the workload or business changes.

Well-Architected is not a one-time certification stamp. A workload changes when traffic grows, people join, services evolve, or business goals shift. Review is most useful when it becomes part of the operating rhythm.

Birch should define the workload and its business importance, gather the people who build, operate, secure, and fund it, and answer review questions honestly. The goal is learning and improvement, not hiding imperfect choices.

The team should then separate findings by impact and urgency. A broad production permission or an untested recovery path may demand earlier action than a small efficiency opportunity. The review should produce accountable improvement work: what will change, why it matters, who owns it, and when the team will check again.

The six pillars do not replace company requirements. Birch must still decide its acceptable downtime, legal obligations, customer promises, budget, and risk appetite. The framework organizes reasoning around those facts.

It is also useful to distinguish the Well-Architected Framework from the AWS Cloud Adoption Framework. AWS CAF, introduced in Leave the Server Room, helps an organization think about broad cloud transformation across people, governance, platform, security, operations, and business outcomes. Well-Architected concentrates on reviewing and improving cloud workloads. One is not a newer name for the other.

Where the manifest services fit

AWS Well-Architected Tool provides a consistent process for reviewing a workload against AWS architectural best practices. Teams define a workload, answer questions through lenses, record decisions, identify risks, and receive guidance for improvement.

The tool supports the review; it does not redesign or repair the workload automatically. It is also not the same as a security audit, compliance certification, monitoring service, or promise that the architecture cannot fail. People still need accurate information, business context, and follow-through.

The standard AWS Well-Architected Framework lens covers the six pillars in this scenario. The service can also support other lenses for additional guidance. At this level, focus on its purpose: make workload reviews consistent, visible, and actionable. Use the shared AWS Well-Architected Tool reference when you want its mechanics and service-specific details.

Common exam confusion

  • Operational excellence versus reliability: Operational excellence is about effective operation and continual improvement. Reliability is about correct, consistent function and recovery from failure.
  • Performance efficiency versus cost optimization: Efficient resource use can reduce cost, but performance efficiency asks whether the workload uses the right resources as needs change. Cost optimization focuses on business value and spending choices.
  • Cost optimization versus cheapest design: The lowest price is not automatically the best value. A design that misses required availability may be cheap and still be wrong.
  • Sustainability versus only carbon reporting: The pillar includes minimizing resource use and environmental impact through efficient workload decisions.
  • Framework versus Tool: The Framework supplies principles and pillars. AWS Well-Architected Tool helps teams conduct and track reviews.
  • Review versus automatic remediation: The tool identifies risks and recommendations; it does not make every change for the team.
  • Well-Architected versus AWS CAF: Well-Architected evaluates workloads. AWS CAF guides broader organizational cloud adoption and transformation.

Recall prompts

  1. Which pillar addresses repeatable operations and continual improvement?
  2. Which pillar asks whether a workload can recover and continue its intended function?
  3. How is performance efficiency different from cost optimization?
  4. Why can one improvement affect several pillars?
  5. What does AWS Well-Architected Tool record and organize?
  6. Why should a Well-Architected review be repeated rather than treated as a permanent approval?

Summary

A working application can still carry serious operational, security, reliability, efficiency, cost, and sustainability risks. The six AWS Well-Architected pillars give Birch a shared way to expose those risks and discuss tradeoffs.

AWS Well-Architected Tool makes the review process consistent and records improvement guidance, but it neither replaces business judgment nor fixes resources automatically. The Cloud Practitioner lesson is to recognize each pillar's purpose and understand that a review is a recurring improvement practice—not an official seal that a workload is perfect.

Official references: CLF-C02 Domain 1, the six pillars, and the AWS Well-Architected Tool introduction.