AWS Glossary
AWS Well-Architected Framework
AWS architectural best practices framework covering six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.
Definition
The AWS Well-Architected Framework is AWS’s structured set of best practices for designing and operating cloud workloads across six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability (added 2021). The free Well-Architected Tool in AWS guides workloads through pillar questions, records high-risk issues (HRIs), and tracks remediation. Lenses (Serverless, SaaS, Machine Learning, Data Analytics, and others) extend the base framework with domain-specific questions. Reviews are not audits — they are engineering conversations that prioritize architectural debt.
When to use it
- New workload design or major refactor — validate assumptions before production cutover
- Annual architecture reviews for business-critical systems as requirements and traffic change
- Preparing for scale, compliance, or acquisition diligence where structured risk documentation helps
- Teams adopting new AWS services (Bedrock, Aurora DSQL, EKS Auto Mode) who need pillar-aligned checklists
When not to use it
- Checkbox exercises without engineering and security stakeholders — incomplete answers produce false confidence
- One-time review with no remediation backlog — HRIs that never get scheduled waste the effort
- Replacing threat modeling, penetration testing, or compliance audits — WAF complements, not substitutes
- Tiny ephemeral prototypes with days of life — lightweight peer review may suffice
Tips
- Involve engineering, security, operations, and finance — cost and sustainability pillars need voices beyond dev
- Start with HRIs from the Well-Architected Tool export; rank by customer impact and blast radius
- Apply a relevant lens (SaaS, Serverless, ML) when the base pillar questions feel too generic
- Link each HRI to a ticket with owner and target date — reviews without accountability fade
- Re-run after major events: region expansion, multi-account migration, GenAI feature launch, or compliance scope change
Gotchas
Serious
- Sustainability ignored: ESG reporting and energy-efficiency expectations now appear in enterprise RFPs — skipping the pillar leaves gaps in customer questionnaires.
- HRIs filed away: Identified public S3 paths or missing DR without remediation is worse than never reviewing — documented neglect.
- Single-team silo: Security answers from engineers alone miss operational runbook and backup realities operations teams know.
Regular
- Well-Architected Tool workload limits require organizing by product or environment — mega-workloads become unreadable.
- Trusted Advisor overlaps but does not replace pillar depth — use both, conflate neither.
- Partner-led reviews vary in quality — insist on evidence-backed HRIs, not generic boilerplate.
Official references
- Well-Architected Framework — six pillars and design principles
- Well-Architected Tool — running and tracking reviews in AWS
Related FactualMinds content
Need help with this topic?
Our AWS-certified team implements, audits, and optimizes these services in production — from Bedrock RAG pipelines to multi-account landing zones.