AWS Well-Architected Framework

1 AWS Well-Architected . 2018 6 . Amazon Web Services AWS Well-Architected . Copyright 2018 Amazon Web Services, Inc. or its affiliates .. AWS . AWS .. AWS .. AWS AWS . AWS .. Amazon Web Services AWS Well-Architected .. 1.. 2.. 3.. 5. Well-Architected 5 .. 8.. 8.. 16.. 27.. 34.. 45.. 54.. 58.. 59.. 60.. 63. : Well-Architected .. 64.. 64.. 73.. 80.. 86.. 92. iii Amazon Web Services AWS Well-Architected .. AWS Well-Architected AWS .. AWS .. AWS .. AWS Well-Architected .. AWS .. (CTO) .. AWS . 1. Amazon Web Services AWS Well-Architected . AWS well - architected .. AWS .. AWS Well-Architected .

2 AWS .. AWS Well-Architected . 5 . AWS Well-Architected .. 2. Amazon Web Services AWS Well-Architected .. E .. ( . ) ( ) .. 3. Amazon Web Services AWS Well-Architected . togaf Zachman Framework . AWS .. 2 1 AWS . 1 ( ) .. 2 . 2 Amazon . 3 . (Customer-obsessed).. AWS .. 1 .. AWS . 1.. 2. Jeff Bezos . ( ) .. 3. Working backwards( ) . AWS . 4. Amazon Web Services AWS Well-Architected . AWS .. Well-Architected AWS .. Well-Architected .. Well-Architected .. (CTO ) Well-Architected .. Well-Architected .. : .. 5. Amazon Web Services AWS Well-Architected .. : .. : .. : . 1 .. : .. 6. Amazon Web Services AWS Well-Architected .

3 : .. 7. Amazon Web Services AWS Well-Architected . Well-Architected 5.. 5 .. 6 . : . ( . 8. Amazon Web Services AWS Well-Architected . ) .. : .. ( . ) .. : . ( . ) . : .. : .. : . 9. Amazon Web Services AWS Well-Architected .. 3 . 1.. 2.. 3.. 10. Amazon Web Services AWS Well-Architected .. AWS . AWS CloudFormation . AWS .. (API) Amazon CloudWatch AWS CloudTrail VPC Flow Logs collectd . CloudWatch Logs OS . CloudWatch . ( .. ) . 11. Amazon Web Services AWS Well-Architected . 1: . 2: . 3: .. ( : . ) .. 12. Amazon Web Services AWS Well-Architected .. ( . ) .. ( ) .. AWS . AWS CloudWatch.

4 AWS. AWS X-Ray . CloudWatch CloudTrail VPC Flow Logs .. 13. Amazon Web Services AWS Well-Architected . 4: .. 5: ( ) .. 1 .. ( . ) .. AWS . AWS . 14. Amazon Web Services AWS Well-Architected .. 6: .. AWS . AWS . AWS CloudFormation .. 3 .. : AWS Config AWS Config .. : Amazon CloudWatch . 15. Amazon Web Services AWS Well-Architected .. : Amazon Elasticsearch Service (Amazon ES) .. AWS .. DevOps AWS.. DevOps at Amazon .. 16. Amazon Web Services AWS Well-Architected . 7 . : . AWS .. : .. : .. ( VPC .. ) . : .. : .. : .. : . 17. Amazon Web Services AWS Well-Architected .. 5 . 1.. 2.. 3.

5 4.. 5.. AWS . AWS . AWS . AWS .. 18. Amazon Web Services AWS Well-Architected .. ( . ) .. AWS AWS Identity and Access Management (IAM) . AWS .. Multi-Factor Authentication (MFA) .. AWS . IAM ID .. ( .. ) . 19. Amazon Web Services AWS Well-Architected . 1: ( , , ) .. 2: .. 3: .. MFA . AWS API . (AWS. Security Token Service (STS) ) .. AWS . CloudTrail . AWS API CloudWatch . AWS Config Amazon GuardDuty . 20. Amazon Web Services AWS Well-Architected .. AWS . Amazon Simple Storage Service (Amazon S3) .. 4: .. AWS .. AWS AWS AWS Marketplace .. Amazon Virtual Private Cloud (VPC) .. 21. Amazon Web Services AWS Well-Architected .

6 5: . 6: AWS .. 7: .. AWS Amazon Elastic Compute Cloud (Amazon EC2) Amazon EC2. Container Service (Amazon ECS) AWS Elastic Beanstalk . Amazon Machine Image (AMI) Auto Scaling . AMI . ( ) .. AWS . AWS . 22. Amazon Web Services AWS Well-Architected . AWS . AWS .. AWS . Amazon S3 S3 IA S3 1 IA . Amazon Glacier .. AWS .. 8: . 9: .. 10: . 11: . AWS .. Amazon S3 (SSE) . 23. Amazon Web Services AWS Well-Architected . HTTPS ( SSL . ) Elastic Load Balancing (ELB) .. AWS .. AWS API .. AWS CloudFormation .. 12: .. 24. Amazon Web Services AWS Well-Architected . AWS . AWS Identity and Access Management (IAM).

7 AWS . 5 .. : IAM AWS . MFA . AWS Organizations . AWS . : AWS CloudTrail AWS API AWS. Config AWS . Amazon GuardDuty . Amazon CloudWatch . AWS CloudWatch Events .. : Amazon Virtual Private Cloud (Amazon VPC) . AWS . Amazon CloudFront . API DDoS . AWS Shield AWS WAF Amazon CloudFront . Application Load Balancer .. : ELB Amazon Elastic Block Store (Amazon EBS) Amazon S3 . Amazon Relational Database Service (Amazon RDS) . Amazon Macie . 25. Amazon Web Services AWS Well-Architected . AWS Key Management Service (AWS KMS) . : IAM . AWS CloudFormation . Amazon CloudWatch Events AWS Lambda.

8 AWS . AWS . AWS .. AWS . AWS . AWS .. 26. Amazon Web Services AWS Well-Architected . AWS Security State of the Union .. 5 . : .. : (KPI).. 27. Amazon Web Services AWS Well-Architected .. : 1 .. : .. ( ) .. : .. 3 . 1.. 2.. 3.. 28. Amazon Web Services AWS Well-Architected .. ( . ) .. AWS .. AWS .. ( . ) . 1: AWS . 2: AWS . AWS . (AWS ) .. ( ) . 29. Amazon Web Services AWS Well-Architected .. AWS .. SLA .. AWS KPI .. 3: ( . ). 4: AWS .. 5: (Change Management) .. KPI .. 30. Amazon Web Services AWS Well-Architected .. AWS .. 6: . 7: .. 8: .. 9: .. (RTO) (RPO) KPI . 31. Amazon Web Services AWS Well-Architected .

9 ( ) KPI .. AWS . AWS . Amazon CloudWatch 3 .. : IAM AWS . Amazon VPC AWS . AWS . AWS Trusted Advisor . AWS Shield (DDoS) . AWS .. : AWS CloudTrail AWS API . AWS Config AWS . Auto Scaling . CloudWatch .. CloudWatch .. : AWS CloudFormation AWS . Amazon S3. 32. Amazon Web Services AWS Well-Architected . Amazon Glacier AWS KMS . AWS .. Amazon Virtual Private Cloud AWS Shield Amazon CloudWatch Amazon S3. AWS KMS.. AWS . AWS . AWS . AWS Amazon VPC . 33. Amazon Web Services AWS Well-Architected .. AWS . Embracing Failure: Fault-Injection and Service Reliability . AWS . Trusted Advisor .. 5.

10 : . IT .. NoSQL .. 34. Amazon Web Services AWS Well-Architected .. : .. : .. : .. : .. 4 .. 1.. 2.. 3.. 35. Amazon Web Services AWS Well-Architected . 4.. AWS .. AWS .. Amazon DynamoDB . NoSQL .. ( . ) . 36. Amazon Web Services AWS Well-Architected . 1: .. AWS AWS . AWS (APN) .. ( . ETL ) . AWS . 4 ( . ) .. AWS 3 .. API .. AWS .. 37. Amazon Web Services AWS Well-Architected . (SSD) (GPU) .. 1 .. AWS Lambda .. 2: . (EC2,Container, Lambda ) .. ( . ) ( ) . ( ) . (WORM ) .. AWS .. 38. Amazon Web Services AWS Well-Architected . Amazon S3 . ( ) . (HDD) SSD 1 .. 3: .. Amazon RDS . Amazon RDS.