Well-Architected Tool 与审查流程

什么是 Well-Architected Tool

# Well-Architected Tool: available in AWS Console
# Navigate to: AWS Console > Well-Architected Tool

# Review components:
# - Workload: your application or system
# - Milestone: snapshot of review at a point in time
# - Lens: set of questions (default: Well-Architected)
# - Risk: High Risk Item (HRI) or Medium Risk Item (MRI)

# Custom lenses also available for specific domains
# (SaaS, Serverless, Data Analytics, etc.)

定义工作负载

# Well-Architected Tool API: create workload
aws wellarchitected create-workload \
  --workload-name 'OrderProcessingService' \
  --description 'Handles e-commerce order processing' \
  --environment PRODUCTION \
  --aws-regions us-east-1 eu-west-1 \
  --review-owner 'platform-team@example.com' \
  --industry-type 'RETAIL' \
  --industry 'E-Commerce'

回答支柱问题

# Example Well-Architected questions per pillar:

# Operational Excellence:
# - How do you determine what your priorities are?
# - How do you structure your organisation?
# - How do you reduce defects?

# Security:
# - How do you protect your network resources?
# - How do you protect your compute resources?

# Reliability:
# - How do you manage service limits?
# - How do you design your workload to withstand failures?

# (65+ questions across all 6 pillars)

理解风险评级

# List risks from Well-Architected review
aws wellarchitected list-answers \
  --workload-id abc123 \
  --lens-alias wellarchitected \
  --pillar-id reliability \
  --risk-counts

# Risk classification:
# HRI (High): Critical gaps, address immediately
# MRI (Medium): Significant gaps, address on roadmap
# No Risk: Best practices implemented
# Unanswered: Not yet evaluated

改进计划

# Get improvement recommendations for a workload
aws wellarchitected get-lens-review \
  --workload-id abc123 \
  --lens-alias wellarchitected \
  --query 'LensReview.PillarReviewSummaries[].{Pillar:PillarName,HRI:RiskCounts.HIGH,MRI:RiskCounts.MEDIUM}'

# Update improvement status
aws wellarchitected update-answer \
  --workload-id abc123 \
  --lens-alias wellarchitected \
  --pillar-id security \
  --question-id security_01 \
  --selected-choices sec_bp_01 sec_bp_02

用于跟踪进度的里程碑

# Create a milestone to snapshot current state
aws wellarchitected create-milestone \
  --workload-id abc123 \
  --milestone-name 'Q2-2026-Review'

# Compare milestones to track improvement
aws wellarchitected list-milestone-reviews \
  --workload-id abc123 \
  --query 'MilestoneReviewSummaries[].{Name:MilestoneName,Date:ReviewedAt,HRI:RiskCounts.HIGH}'

# Shows: Q1: 12 HRI -> Q2: 4 HRI -> Q3: 1 HRI

自定义镜头

# List available lenses
aws wellarchitected list-lenses

# Common lenses:
# wellarchitected     - Default 6-pillar review
# serverless          - Lambda, API Gateway, DynamoDB
# saas                - Multi-tenancy, isolation, onboarding
# dataanalytics       - Data lakes, Redshift, Athena
# iot                 - IoT Core, Greengrass
# foundationaltechnicallens - Low-level architecture

# Associate lens with workload
aws wellarchitected associate-lenses \
  --workload-id abc123 \
  --lens-aliases serverless wellarchitected

大规模开展 Well-Architected 评审

# Share workload for review with central architecture team
aws wellarchitected create-workload-share \
  --workload-id abc123 \
  --shared-with '999999999999' \
  --permission-type CONTRIBUTOR

# The central team sees the workload in their console
# They can answer questions and create notes
# Original owner retains administrative control

将评审集成到 SDLC 中

# SDLC integration checklist:
# Phase: Design
#   - Create workload in W-A Tool
#   - Answer all pillar questions
#   - Document HRIs that are accepted risks with justification

# Phase: Pre-launch
#   - Resolve all HRIs or document mitigation
#   - Create 'pre-launch' milestone

# Phase: Post-launch (quarterly)
#   - Update answers as architecture evolves
#   - Create quarterly milestone
#   - Review new improvement recommendations

架构完善与 SAA-C03 考试

# Quick pillar reference for exam:
# Operational Excellence:
#   IaC (CloudFormation), CI/CD, runbooks, post-mortem
# Security:
#   IAM least-privilege, KMS, GuardDuty, WAF, CloudTrail
# Reliability:
#   ASG, ELB, Multi-AZ, backup/restore, FIS chaos testing
# Performance Efficiency:
#   Right instance type, ElastiCache, CloudFront, DAX
# Cost Optimisation:
#   Spot, Savings Plans, S3 lifecycle, Cost Explorer
# Sustainability:
#   Graviton, serverless, data lifecycle, high utilisation

逐步执行评审

# Automate workload review reporting
aws wellarchitected get-lens-review-report \
  --workload-id abc123 \
  --lens-alias wellarchitected \
  --milestone-number 3

# Report includes:
# - HRI count per pillar
# - MRI count per pillar
# - Specific question gaps
# - Improvement recommendations with links
# Exportable as PDF for stakeholder presentations

快速检查

课程回顾