well architected framework

https://www.youtube.com/watch?v=CeceqWuZ0Cg
Shared resp b/w AWS and customers
- customers are resp for security IN the cloud
- aws resp for sec OF the cloud

AWS trusted Advisor
- cost opt, sec, fault tol, perf domains
- real time guidance to achieve these
- config advisor to adjust rules to follow or ignore

To evaluate architecture against best practices
- Sec, rel, perf, cost opt, operational excellence

General Design Principles
- stop guessing capacity needs
- test systems at production scale
- automate to make architectural experimentation easier
- allow for evolutionary architectures
- buld data-driven architectures
- improve through game days

Design Principles for Security
- apply security at all layers
- enable traceability
- implement a principle of least privilege
- focus on securing your system
- automate security best practices