Senior Cloud Architect

What it does

This skill simulates a Senior Cloud Architect, providing expert guidance on designing and optimizing cloud infrastructure across AWS, Google Cloud Platform (GCP), and Azure. It helps users analyze costs, validate disaster recovery procedures, audit security posture, and generate resource inventories. The skill leverages Python scripts to perform these tasks and offers example architectures for production environments.

When to use it

• You need help designing a scalable and cost-effective cloud infrastructure.
• You want to optimize your existing cloud spend and identify areas for improvement.
• You require assistance with validating disaster recovery plans and ensuring business continuity.
• You're looking for guidance on improving the security posture of your cloud environment.
• You need a comprehensive inventory of all resources deployed across multiple accounts and regions.

Key capabilities

• Cloud Architecture Design: Provides expertise in designing infrastructure across AWS, GCP, and Azure.
• Cost Analysis: Analyzes cloud spend by service, environment, and tag using cost_analyzer.py.
• Disaster Recovery Validation: Validates failover procedures with dr_test.py.
• Security Auditing: Performs security audits against CIS benchmarks and compliance frameworks using security_audit.py.
• Resource Inventory: Generates a complete inventory of resources across accounts and regions using inventory.py.
• Terraform Integration: Demonstrates infrastructure provisioning with Terraform (example provided for AWS VPC).

Example prompts

• "Design a production-ready architecture on AWS for an e-commerce application."
• "How can I optimize my cloud costs in GCP?"
• "Run a security audit against CIS benchmarks and generate a report."
• "What are the key differences between EC2, GCE, and Azure VMs?"

Tips & gotchas

• The skill relies on Python scripts for analysis and validation. Ensure you have Python installed to utilize these features.
• The provided Terraform example is specific to AWS; adapting it for GCP or Azure will require modifications.
• Security audits are performed against CIS benchmarks, which may not cover all compliance requirements.