Certablo
← Knowledge Base

AWS Well-Architected Framework

The six Well-Architected pillars and the review mindset AWS uses to evaluate architecture decisions, expose risks, and improve workloads over time.

CLF-C02

Visual overview

WELL-ARCHITECTEDSix lenses for evaluating one workload
OPSOperational Excellence
SECSecurity
RELReliability
PERFPerformance Efficiency
COSTCost Optimization
SUSSustainability
WORKLOADRequirements + trade-offsReview → improve → review again
The pillars are evaluated together. Improving one dimension can create trade-offs in another, so workload context determines the right balance.
AWS SERVICE MAPArchitecture is evaluated as a system

Review tooling, telemetry, and cost evidence support architecture decisions.

Well-Architected ToolReview
CloudWatchOperational evidence
Cost ExplorerCost evidence
EXAM-RELEVANT MECHANICS

Technical reference

The framework evaluates workloads through six complementary pillars.

Operational ExcellenceRun + improve

Operate effectively and continuously improve procedures.

Security + ReliabilityProtect + recover

Protect systems while engineering consistent operation and recovery.

Performance EfficiencyEfficient resources

Match technologies/resources to workload requirements.

Cost + SustainabilityOptimize value + impact

Avoid unnecessary cost and environmental impact.

What the framework is for

The AWS Well-Architected Framework provides a consistent approach for evaluating cloud architectures and understanding the consequences of design decisions. It is organized around questions, design principles, and best practices rather than a single mandatory reference architecture. The objective is to expose risks and trade-offs so teams can make informed improvements to a workload.

AWS presents Well-Architected reviews as a constructive process, not an audit mechanism. A review establishes context, examines the workload against the framework, records improvement opportunities, and can be repeated as the system evolves. This matters because a design that was appropriate at launch may need to change as scale, business criticality, threat models, or available AWS capabilities change.

The six pillars

Operational Excellence focuses on running and monitoring systems effectively and continually improving processes and procedures. Security focuses on protecting information, systems, and assets while delivering business value through risk assessment and mitigation. Reliability addresses a workload's ability to perform its function correctly and consistently, including recovery from failures and the ability to adapt to changes in demand.

Performance Efficiency is about using computing resources efficiently as requirements and technologies evolve. Cost Optimization focuses on avoiding unnecessary cost and delivering business value at an appropriate price point. Sustainability considers minimizing the environmental impact of running cloud workloads by improving resource utilization and reducing unnecessary consumption.

  • Operational Excellence — operate, observe, learn, and improve.
  • Security — protect data, systems, and assets while managing risk.
  • Reliability — perform correctly and recover or adapt when conditions change.
  • Performance Efficiency — use appropriate resources efficiently as technology evolves.
  • Cost Optimization — achieve required outcomes while avoiding unnecessary spend.
  • Sustainability — reduce environmental impact through efficient resource use.

Pillars interact through trade-offs

Architecture decisions frequently affect more than one pillar. Adding redundant capacity can improve reliability while increasing cost. Aggressive resource reduction can lower cost but reduce performance headroom. Encrypting and controlling access is essential for security, while the implementation still needs to meet performance and operational requirements. Well-Architected thinking makes these trade-offs explicit instead of optimizing a single metric in isolation.

The correct balance depends on the workload. A prototype, a public marketing page, and a regulated payment system can reasonably make different choices because their consequences of failure differ. The framework supplies a repeatable vocabulary for discussing those choices with technical and business stakeholders.

Using Well-Architected as a learning tool

For certification study, the six pillars are more useful when connected to design intent than when memorized as six names. Ask which pillar a scenario is mainly concerned with: rapid recovery and fault isolation point toward Reliability; least privilege and data protection toward Security; eliminating idle resources toward Cost Optimization; and improving operational procedures and observability toward Operational Excellence.

In real AWS work, the framework extends far beyond these short descriptions. Each pillar contains detailed design principles, best practices, questions, and implementation guidance. The AWS Well-Architected Tool can be used to review workloads against framework guidance and track improvement items.

Key takeaways

  1. 01

    Well-Architected is a decision and review framework, not a one-size-fits-all architecture template.

  2. 02

    Its six pillars are Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.

  3. 03

    Architecture choices create trade-offs across pillars, so workload context matters.

  4. 04

    Reviews should be repeated as workloads and requirements evolve.

Official AWS sources

Use these primary AWS resources for the source material behind this article and for deeper reference.