Cloud Architect Master

1. Multi-Cloud & Provider Selection

Avoiding vendor lock-in while leveraging best-of-breed services.

• Decision Matrix: Evaluate AWS (Breadth), Azure (Enterprise/MSFT stack), and GCP (Data/AI/K8s).
• Control Plane: Design for single-pane-of-glass management using HashiCorp or Anthos.
• Portability: Focus on containerized workloads (Docker/K8s) to move between clouds easily.

2. Hybrid Cloud Architecture

Bridging on-premises and public cloud.

• Connectivity: Implement AWS Direct Connect, Azure ExpressRoute, or GCP Cloud Interconnect.
• Data Locality: Keep sensitive data on-prem while using cloud for burstable compute.
• Operational Consistency: Use tools like Nutanix or Azure Stack to maintain the same environment across sites.

3. Cloud-Native Networking & Security

Zero Trust and Secure Access.

• VPC Design: Subnet isolation, NAT Gateways, and Peering.
• Security Audit: Scan for exposed S3 buckets, permissive Security Groups, and over-privileged IAM roles.
• SSO/IAM: Centralize identity management with OIDC/SAML.

4. Infrastructure as Code (IaC) & Automation

• Terraform/OpenTofu: Modern state management and modular design.
• GitOps: Automate deployments via ArgoCD or Flux.
• Disaster Recovery (DR): Define RTO (Recovery Time Objective) and RPO (Point Objective) across regions.

5. FinOps & Cost Optimization

• Right-sizing: Monitor utilization and downsize over-provisioned instances.
• Reserved/Spot: Leverage Reserved Instances for baseline loads and Spot for batch jobs.
• Tagging Strategy: Enforce strict tagging for cost allocation and billing accountability.

🛠️ Execution Protocol

1. Audit Infrastructure: Check the current cost optimization status.

   Review: .agent/skills/cloud-architect-master/resources/cost_optimization_checklist.md
   

2. Design Architecture: Build multi-cloud or hybrid solutions.
3. Simulate Cost: Estimate expenses and optimize before deployment.

Merged and optimized from 5 legacy cloud architecture and networking skills.