{"id":"aws-solution-architect","name":"aws-solution-architect","summary":"サーバーレスでスケーラブルかつコスト効率の高いクラウドインフラに注力し、最新のDevOps実践とインフラストラクチャ・アズ・コードに注力するスタートアップ向けの専門的なAWSソリューションアーキテクチャ","body":"# AWS Solution Architect for Startups\n\nThis skill provides comprehensive AWS architecture design expertise for startup companies, emphasizing serverless technologies, scalability, cost optimization, and modern cloud-native patterns.\n\n## Capabilities\n\n- **Serverless Architecture Design**: Lambda, API Gateway, DynamoDB, EventBridge, Step Functions, AppSync\n- **Infrastructure as Code**: CloudFormation, CDK (Cloud Development Kit), Terraform templates\n- **Scalable Application Architecture**: Auto-scaling, load balancing, multi-region deployment\n- **Data & Storage Solutions**: S3, RDS Aurora Serverless, DynamoDB, ElastiCache, Neptune\n- **Event-Driven Architecture**: EventBridge, SNS, SQS, Kinesis, Lambda triggers\n- **API Design**: API Gateway (REST & WebSocket), AppSync (GraphQL), rate limiting, authentication\n- **Authentication & Authorization**: Cognito, IAM, fine-grained access control, federated identity\n- **CI/CD Pipelines**: CodePipeline, CodeBuild, CodeDeploy, GitHub Actions integration\n- **Monitoring & Observability**: CloudWatch, X-Ray, CloudTrail, alarms, dashboards\n- **Cost Optimization**: Reserved instances, Savings Plans, right-sizing, budget alerts\n- **Security Best Practices**: VPC design, security groups, WAF, Secrets Manager, encryption\n- **Microservices Patterns**: Service mesh, API composition, saga patterns, CQRS\n- **Container Orchestration**: ECS Fargate, EKS (Kubernetes), App Runner\n- **Content Delivery**: CloudFront, edge locations, origin shield, caching strategies\n- **Database Migration**: DMS, schema conversion, zero-downtime migrations\n\n## Input Requirements\n\nArchitecture design requires:\n- **Application type**: Web app, mobile backend, data pipeline, microservices, SaaS platform\n- **Traffic expectations**: Users/day, requests/second, geographic distribution\n- **Data requirements**: Storage needs, database type, backup/retention policies\n- **Budget constraints**: Monthly spend limits, cost optimization priorities\n- **Team size & expertise**: Developer count, AWS experience level, DevOps maturity\n- **Compliance needs**: GDPR, HIPAA, SOC 2, PCI-DSS, data residency\n- **Availability requirements**: SLA targets, uptime goals, disaster recovery RPO/RTO\n\nFormats accepted:\n- Text description of application requirements\n- JSON with structured architecture specifications\n- Existing architecture diagrams or documentation\n- Current AWS resource inventory (for optimization)\n\n## Output Formats\n\nResults include:\n- **Architecture diagrams**: Visual representations using draw.io or Lucidchart format\n- **CloudFormation/CDK templates**: Infrastructure as Code (IaC) ready to deploy\n- **Terraform configurations**: Multi-cloud compatible infrastructure definitions\n- **Cost estimates**: Detailed monthly cost breakdown with optimization suggestions\n- **Security assessment**: Best practices checklist, compliance validation\n- **Deployment guides**: Step-by-step implementation instructions\n- **Runbooks**: Operational procedures, troubleshooting guides, disaster recovery plans\n- **Migration strategies**: Phased migration plans, rollback procedures\n\n## How to Use\n\n\"Design a serverless API backend for a mobile app with 100k users using Lambda and DynamoDB\"\n\"Create a cost-optimized architecture for a SaaS platform with multi-tenancy\"\n\"Generate CloudFormation template for a three-tier web application with auto-scaling\"\n\"Design event-driven microservices architecture using EventBridge and Step Functions\"\n\"Optimize my current AWS setup to reduce costs by 30%\"\n\n## Scripts\n\n- `architecture_designer.py`: Generates architecture patterns and service recommendations\n- `serverless_stack.py`: Creates serverless application stacks (Lambda, API Gateway, DynamoDB)\n- `cost_optimizer.py`: Analyzes AWS costs and provides optimization recommendations\n- `iac_generator.py`: Generates CloudFormation, CDK, or Terraform templates\n- `security_auditor.py`: AWS security best practices validation and compliance checks\n\n## Architecture Patterns\n\n### 1. Serverless Web Application\n**Use Case**: SaaS platforms, mobile backends, low-traffic websites\n\n**Stack**:\n- **Frontend**: S3 + CloudFront (static hosting)\n- **API**: API Gateway + Lambda\n- **Database**: DynamoDB or Aurora Serverless\n- **Auth**: Cognito\n- **CI/CD**: Amplify or CodePipeline\n\n**Benefits**: Zero server management, pay-per-use, auto-scaling, low operational overhead\n\n**Cost**: $50-500/month for small to medium traffic\n\n### 2. Event-Driven Microservices\n**Use Case**: Complex business workflows, asynchronous processing, decoupled systems\n\n**Stack**:\n- **Events**: EventBridge (event bus)\n- **Processing**: Lambda functions or ECS Fargate\n- **Queue**: SQS (dead letter queues for failures)\n- **State Management**: Step Functions\n- **Storage**: DynamoDB, S3\n\n**Benefits**: Loose coupling, independent scaling, failure isolation, easy testing\n\n**Cost**: $100-1000/month depending on event volume\n\n### 3. Modern Three-Tier Application\n**Use Case**: Traditional web apps with dynamic content, e-commerce, CMS\n\n**Stack**:\n- **Load Balancer**: ALB (Application Load Balancer)\n- **Compute**: ECS Fargate or EC2 Auto Scaling\n- **Database**: RDS Aurora (MySQL/PostgreSQL)\n- **Cache**: ElastiCache (Redis)\n- **CDN**: CloudFront\n- **Storage**: S3\n\n**Benefits**: Proven pattern, easy to understand, flexible scaling\n\n**Cost**: $300-2000/month depending on traffic and instance sizes\n\n### 4. Real-Time Data Processing\n**Use Case**: Analytics, IoT data ingestion, log processing, streaming\n\n**Stack**:\n- **Ingestion**: Kinesis Data Streams or Firehose\n- **Processing**: Lambda or Kinesis Analytics\n- **Storage**: S3 (data lake) + Athena (queries)\n- **Visualization**: QuickSight\n- **Alerting**: CloudWatch + SNS\n\n**Benefits**: Handle millions of events, real-time insights, cost-effective storage\n\n**Cost**: $200-1500/month depending on data volume\n\n### 5. GraphQL API Backend\n**Use Case**: Mobile apps, single-page applications, flexible data queries\n\n**Stack**:\n- **API**: AppSync (managed GraphQL)\n- **Resolvers**: Lambda or direct DynamoDB integration\n- **Database**: DynamoDB\n- **Real-time**: AppSync subscriptions (WebSocket)\n- **Auth**: Cognito or API keys\n\n**Benefits**: Single endpoint, reduce over/under-fetching, real-time subscriptions\n\n**Cost**: $50-400/month for moderate usage\n\n### 6. Multi-Region High Availability\n**Use Case**: Global applications, disaster recovery, compliance requirements\n\n**Stack**:\n- **DNS**: Route 53 (geolocation routing)\n- **CDN**: CloudFront with multiple origins\n- **Compute**: Multi-region Lambda or ECS\n- **Database**: DynamoDB Global Tables or Aurora Global Database\n- **Replication**: S3 cross-region replication\n\n**Benefits**: Low latency globally, disaster recovery, data sovereignty\n\n**Cost**: 1.5-2x single region costs\n\n## Best Practices\n\n### Serverless Design Principles\n1. **Stateless functions** - Store state in DynamoDB, S3, or ElastiCache\n2. **Idempotency** - Handle retries gracefully, use unique request IDs\n3. **Cold start optimization** - Use provisioned concurrency for critical paths, optimize package size\n4. **Timeout management** - Set appropriate timeouts, use Step Functions for long processes\n5. **Error handling** - Implement retry logic, dead letter queues, exponential backoff\n\n### Cost Optimization\n1. **Right-sizing** - Start small, monitor metrics, scale based on actual usage\n2. **Reserved capacity** - Use Savings Plans or Reserved Instances for predictable workloads\n3. **S3 lifecycle policies** - Transition to cheaper storage tiers (IA, Glacier)\n4. **Lambda memory optimization** - Test different memory settings for cost/performance balance\n5. **CloudWatch log retention** - Set appropriate retention periods (7-30 days for most)\n6. **NAT Gateway alternatives** - Use VPC endpoints, consider single NAT in dev environments\n\n### Security Hardening\n1. **Principle of least privilege** - IAM roles with minimal permissions\n2. **Encryption everywhere** - At rest (KMS) and in transit (TLS/SSL)\n3. **Network isolation** - Private subnets, security groups, NACLs\n4. **Secrets management** - Use Secrets Manager or Parameter Store, never hardcode\n5. **API protection** - WAF rules, rate limiting, API keys, OAuth2\n6. **Audit logging** - CloudTrail for API calls, VPC Flow Logs for network traffic\n\n### Scalability Design\n1. **Horizontal over vertical** - Scale out with more small instances vs. larger instances\n2. **Database sharding** - Partition data by tenant, geography, or time\n3. **Read replicas** - Offload read traffic from primary database\n4. **Caching layers** - CloudFront (edge), ElastiCache (application), DAX (DynamoDB)\n5. **Async processing** - Use queues (SQS) for non-critical operations\n6. **Auto-scaling policies** - Target tracking (CPU, requests) vs. step scaling\n\n### DevOps & Reliability\n1. **Infrastructure as Code** - Version control, peer review, automated testing\n2. **Blue/Green deployments** - Zero-downtime releases, instant rollback\n3. **Canary releases** - Test new versions with small traffic percentage\n4. **Health checks** - Application-level health endpoints, graceful degradation\n5. **Chaos engineering** - Test failure scenarios, validate recovery procedures\n6. **Monitoring & alerting** - Set up CloudWatch alarms for critical metrics\n\n## Service Selection Guide\n\n### Compute\n- **Lambda**: Event-driven, short-duration tasks (<15 min), variable traffic\n- **Fargate**: Containerized apps, long-running processes, predictable traffic\n- **EC2**: Custom configurations, GPU/FPGA needs, Windows apps\n- **App Runner**: Simple container deployment from source code\n\n### Database\n- **DynamoDB**: Key-value, document store, serverless, single-digit ms latency\n- **Aurora Serverless**: Relational DB, variable workloads, auto-scaling\n- **Aurora Standard**: High-performance relational, predictable traffic\n- **RDS**: Traditional databases (MySQL, PostgreSQL, MariaDB, SQL Server)\n- **DocumentDB**: MongoDB-compatible, document store\n- **Neptune**: Graph database for connected data\n- **Timestream**: Time-series data, IoT metrics\n\n### Storage\n- **S3 Standard**: Frequent access, low latency\n- **S3 Intelligent-Tiering**: Automatic cost optimization\n- **S3 IA (Infrequent Access)**: Backups, archives (30-day minimum)\n- **S3 Glacier**: Long-term archives, compliance\n- **EFS**: Network file system, shared storage across instances\n- **EBS**: Block storage for EC2, high IOPS\n\n### Messaging & Events\n- **EventBridge**: Event bus, loosely coupled microservices\n- **SNS**: Pub/sub, fan-out notifications\n- **SQS**: Message queuing, decoupling, buffering\n- **Kinesis**: Real-time streaming data, analytics\n- **MQ**: Managed message brokers (RabbitMQ, ActiveMQ)\n\n### API & Integration\n- **API Gateway**: REST APIs, WebSocket, throttling, caching\n- **AppSync**: GraphQL APIs, real-time subscriptions\n- **AppFlow**: SaaS integration (Salesforce, Slack, etc.)\n- **Step Functions**: Workflow orchestration, state machines\n\n## Startup-Specific Considerations\n\n### MVP (Minimum Viable Product) Architecture\n**Goal**: Launch fast, minimal infrastructure\n\n**Recommended**:\n- Amplify (full-stack deployment)\n- Lambda + API Gateway + DynamoDB\n- Cognito for auth\n- CloudFront + S3 for frontend\n\n**Cost**: $20-100/month\n**Setup time**: 1-3 days\n\n### Growth Stage (Scaling to 10k-100k users)\n**Goal**: Handle growth, maintain cost efficiency\n\n**Add**:\n- ElastiCache for caching\n- Aurora Serverless for complex queries\n- CloudWatch dashboards and alarms\n- CI/CD pipeline (CodePipeline)\n- Multi-AZ deployment\n\n**Cost**: $500-2000/month\n**Migration time**: 1-2 weeks\n\n### Scale-Up (100k+ users, Series A+)\n**Goal**: Reliability, observability, global reach\n\n**Add**:\n- Multi-region deployment\n- DynamoDB Global Tables\n- Advanced monitoring (X-Ray, third-party APM)\n- WAF and Shield for DDoS protection\n- Dedicated support plan\n- Reserved instances/Savings Plans\n\n**Cost**: $3000-10000/month\n**Migration time**: 1-3 months\n\n## Common Pitfalls to Avoid\n\n### Technical Debt\n- **Over-engineering early** - Don't build for 10M users when you have 100\n- **Under-monitoring** - Set up basic monitoring from day one\n- **Ignoring costs** - Enable Cost Explorer and billing alerts immediately\n- **Single region dependency** - Plan for multi-region from start\n\n### Security Mistakes\n- **Public S3 buckets** - Use bucket policies, block public access\n- **Overly permissive IAM** - Avoid \"*\" permissions, use specific resources\n- **Hardcoded credentials** - Use IAM roles, Secrets Manager\n- **Unencrypted data** - Enable encryption by default\n\n### Performance Issues\n- **No caching** - Add CloudFront, ElastiCache early\n- **Inefficient queries** - Use indexes, avoid scans in DynamoDB\n- **Large Lambda packages** - Use layers, minimize dependencies\n- **N+1 queries** - Implement DataLoader pattern, batch operations\n\n### Cost Surprises\n- **Undeleted resources** - Tag everything, review regularly\n- **Data transfer costs** - Keep traffic within same AZ/region when possible\n- **NAT Gateway charges** - Use VPC endpoints for AWS services\n- **CloudWatch Logs accumulation** - Set retention policies\n\n## Compliance & Governance\n\n### Data Residency\n- Use specific regions (eu-west-1 for GDPR)\n- Enable S3 bucket replication restrictions\n- Configure Route 53 geolocation routing\n\n### HIPAA Compliance\n- Use BAA-eligible services only\n- Enable encryption at rest and in transit\n- Implement audit logging (CloudTrail)\n- Configure VPC with private subnets\n\n### SOC 2 / ISO 27001\n- Enable AWS Config for compliance rules\n- Use AWS Audit Manager\n- Implement least privilege access\n- Regular security assessments\n\n## Limitations\n\n- **Lambda limitations**: 15-minute execution limit, 10GB memory max, cold start latency\n- **API Gateway limits**: 29-second timeout, 10MB payload size\n- **DynamoDB limits**: 400KB item size, eventually consistent reads by default\n- **Regional availability**: Not all services available in all regions\n- **Vendor lock-in**: Some serverless services are AWS-specific (consider abstraction layers)\n- **Learning curve**: Requires AWS expertise, DevOps knowledge\n- **Debugging complexity**: Distributed systems harder to troubleshoot than monoliths\n\n## Helpful Resources\n\n- **AWS Well-Architected Framework**: https://aws.amazon.com/architecture/well-architected/\n- **AWS Architecture Center**: https://aws.amazon.com/architecture/\n- **Serverless Land**: https://serverlessland.com/\n- **AWS Pricing Calculator**: https://calculator.aws/\n- **AWS Cost Explorer**: Track and analyze spending\n- **AWS Trusted Advisor**: Automated best practice checks\n- **CloudFormation Templates**: https://github.com/awslabs/aws-cloudformation-templates\n- **AWS CDK Examples**: https://github.com/aws-samples/aws-cdk-examples","author":"@alirezarezvani","ownerProfile":null,"authorContacts":null,"sourceUrl":"https://github.com/alirezarezvani/claude-code-skill-factory/tree/dev/generated-skills/aws-solution-architect","license":"MIT","category":"devops","lang":"en","tokens":3479,"stars":0,"calls30d":1,"claimed":false,"visibility":"public","origin":"crawler","version":"0.1.0","createdAt":"2026-08-22","updatedAt":"2026-08-22","files":[{"path":"architecture_designer.py","size":35618,"sha256":"cdb9730d20093114d5ef0a541a9194bb861062d4af65557794a8e0fc608eadf9"},{"path":"cost_optimizer.py","size":15618,"sha256":"a129693e7877817e8e8d1167a19637d9c7cfffc19c538a7cbe4e85ccba2a3aba"},{"path":"expected_output.json","size":1567,"sha256":"0a4dcd8efcea445f6a655fe7e0556030a58971b0f774589a4fc0d7beb5186d84"},{"path":"HOW_TO_USE.md","size":9147,"sha256":"834ee4506ed7f307dce9a8f1d94f79ae8bb3cf0968f499f1d18b6420166a75a1"},{"path":"sample_input.json","size":426,"sha256":"bf63a33234a590c2967e89f3aa919472adaa310526862cc386037f085111b37e"},{"path":"serverless_stack.py","size":17798,"sha256":"4dc6f81f7fca1cbf62c0146e8f19efc3739e71b32f2092d36b8fea3dee9bc45e"}],"requires":{"mcp":[],"tools":[]},"safety":{"flags":[{"code":"net.endpoints","kind":"exfiltration","excerpt":"aws.amazon.com, calculator.aws, docs.aws.amazon.com, serverlessland.com","message":"bundled scripts reach 4 external host(s)","severity":"warn"}],"scannedAt":"2026-08-22","hasScripts":true,"networkEndpoints":["aws.amazon.com","calculator.aws","docs.aws.amazon.com","serverlessland.com"]}}