-
Operational Excellence
-
- Resources have identified owners
- Processes and procedures have identified owners
- Operations activities have identified owners responsible for their performance
- Team members know what they are responsible for
- Mechanisms exist to identify responsibility and ownership
- Mechanisms exist to request additions, changes, and exceptions
- Responsibilities between teams are predefined or negotiated
-
- Executive Sponsorship
- Team members are empowered to take action when outcomes are at risk
- Escalation is encouraged
- Communications are timely, clear, and actionable
- Experimentation is encouraged
- Team members are encouraged to maintain and grow their skill sets
- Resource teams appropriately
- Diverse opinions are encouraged and sought within and across teams
-
- Use version control
- Test and validate changes
- Use configuration management systems
- Use build and deployment management systems
- Perform patch management
- Implement practices to improve code quality
- Share design standards
- Use multiple environments
- Make frequent, small, reversible changes
- Fully automate integration and deployment
-
Security
-
- Evaluate and implement new security services and features regularly
- Automate testing and validation of security controls in pipelines
- Identify and prioritize risks using a threat model
- Keep up-to-date with security recommendations
- Keep up-to-date with security threats
- Identify and validate control objectives
- Secure account root user and properties
- Separate workloads using accounts
-
- Analyze public and cross-account access
- Manage access based on life cycle
- Share resources securely with a third party
- Reduce permissions continuously
- Share resources securely within your organization
- Establish emergency access process
- Define permission guardrails for your organization
- Grant least privilege access
- Define access requirements
-
- Build a program that embeds security ownership in workload teams
- Centralize services for packages and dependencies
- Manual code reviews
- Automate testing throughout the development and release lifecycle
- Train for application security
- Regularly assess security properties of the pipelines
- Deploy software programmatically
- Perform regular penetration testing
-
-
Reliability
-
- How do you ensure sufficient gap between quotas and maximum usage to accommodate failover?
- How do you automate quota management?
- How do you monitor and manage service quotas?
- How do you accommodate fixed service quotas and constraints through architecture?
- How do you manage service quotas and constraints across accounts and Regions?
- How do you manage service quotas and constraints?
- How do you build a program that embeds reliability into workload teams?
-
- How do you enforce non-overlapping private IP address ranges in all private address spaces?
- How do you prefer hub-and-spoke topologies over many-to-many mesh?
- How do you ensure IP subnet allocation accounts for expansion and availability?
- How do you provision redundant connectivity between private networks in the cloud and on-premises environments?
- How do you use highly available network connectivity for workload public endpoints?
-
- Monitor end-to-end tracing of requests through your system
- Conduct reviews regularly
- Analytics
- Automate responses (Real-time processing and alarming)
- Send notifications (Real-time processing and alarming)
- Define and calculate metrics (Aggregation)
- Monitor End-to-End Tracing of Requests Through Your System
-
- Monitor all components of the workload to detect failures
- Fail over to healthy resources
- Automate healing on all layers
- Rely on the data plane and not the control plane during recovery
- Use static stability to prevent bimodal behavior
- Send notifications when events impact availability
- Architect your product to meet availability targets and uptime service level agreements (SLAs)
-
-
Cost Optimization
-
- Establish ownership of cost optimization
- Establish a partnership between finance and technology
- Establish cloud budgets and forecasts
- Implement cost awareness in your organizational processes
- Monitor cost proactively
- Keep up-to-date with new service releases
- Quantify business value from cost optimization
- Report and notify on cost optimization
- Create a cost-aware culture
-
- Perform cost analysis for different usage over time
- Analyze all components of this workload
- Perform a thorough analysis of each component
- Select components of this workload to optimize cost in line with organization priorities
- Perform cost analysis for different usage over time
- Select software with cost effective licensing
-
-
Performance
-
- Learn about and understand available cloud services and features
- Evaluate how trade-offs impact customers and architecture efficiency
- Use guidance from your cloud provider or an appropriate partner to learn about architecture patterns and best practices
- Factor cost into architectural decisions
- Use policies and reference architectures
- Use benchmarking to drive architectural decisions
- Use a data-driven approach for architectural choices
-
- Use purpose-built data store that best support your data access and storage requirements
- Collect and record data store performance metrics
- Evaluate available configuration options for data store
- Implement Strategies to Improve Query Performance in Data Store
- Implement data access patterns that utilize caching
-
- Understand how networking impacts performance
- Evaluate available networking features
- Choose appropriate dedicated connectivity or VPN for your workload
- Use load balancing to distribute traffic across multiple resources
- Choose network protocols to improve performance
- Choose your workload's location based on network requirements
- Optimize network configuration based on metrics
-
- Establish key performance indicators (KPIs) to measure workload health and performance
- Use monitoring solutions to understand the areas where performance is most critical
- Define a process to improve workload performance
- Review metrics at regular intervals
- Load test your workload
- Use automation to proactively remediate performance-related issues
- Keep your workload and services up-to-date
-
-
Sustainability
-
- Optimize geographic placement of workloads based on their networking requirements
- Align SLAs with sustainability goals
- Optimize geographic placement of workloads based on their networking requirements
- Stop the creation and maintenance of unused assets
- Optimize team member resources for activities performed
- Implement buffering or throttling to flatten the demand curve
-
- Optimize software and architecture for asynchronous and scheduled jobs
- Remove or refactor workload components with low or no use
- Optimize areas of code that consume the most time or resources
- Optimize impact on devices and equipment
- Use software patterns and architectures that best support data access and storage patterns
- Remove unneeded or redundant data
- Use technologies that support data access and storage patterns
- Use policies to manage the lifecycle of your datasets
- Use shared file systems or storage to access common data
- Back up data only when difficult to recreate
- Use elasticity and automation to expand block storage or file system
- Minimize data movement across networks
-
- Articles coming soon
Automate testing and rollback
Automating Testing and Rollback for Reliable Deployments
Automating both testing and rollback processes is essential for increasing the speed, reliability, and confidence of deployments. A well-defined strategy for automated testing and rollback ensures that changes are verified under realistic conditions and that failures are addressed quickly, reducing the potential impact on production environments. Automating these activities also enables teams to respond proactively to issues, minimizing downtime and providing a consistent pathway to recovery.
Automate Testing During Deployment
Automate testing during deployment to validate that the changes being deployed meet expectations. These tests simulate both human and system interactions to verify that the new version is functional and performs as intended. Automated tests can include functional, integration, and end-to-end tests, ensuring that the workload continues to meet business and technical requirements.
Simulate Real Interactions in Production
Automate testing not only in pre-production but also during production deployments. By simulating real user interactions and system activities in production, teams can gain confidence that the changes will perform as expected in a live environment. This approach helps detect issues that may not have been apparent in pre-production, allowing teams to respond quickly.
Automate Rollback on Pre-Defined Conditions
Implement automated rollback mechanisms that are triggered based on pre-defined conditions. Rollback should be initiated automatically if the desired outcome is not achieved, such as when key metrics deviate from acceptable thresholds or when automated tests fail. Automated rollback allows for rapid recovery, ensuring that the system can return to a previous known good state with minimal downtime or manual intervention.
Minimize Impact Through Rapid Recovery
Automating rollback helps reduce the time required to recover from an issue and minimize its impact on users. Automated rollbacks are faster than manual interventions and ensure a consistent approach to returning the system to stability. By defining rollback criteria ahead of time, teams can mitigate the risks associated with unsuccessful changes and keep the workload stable.
Increase Deployment Success Rate
By integrating automated testing and rollback capabilities into the deployment process, teams can increase the success rate of releases. Automated testing catches issues before they affect users, and rollback mechanisms provide an immediate recovery plan if something goes wrong. Together, these practices ensure that deployments are reliable, predictable, and less likely to introduce disruptions to production.
Supporting Questions
- How is automated testing integrated into the deployment process to verify changes?
- What pre-defined conditions are used to automatically initiate rollbacks during deployment?
- How do automated rollback mechanisms help reduce the impact of unsuccessful changes?
Roles and Responsibilities
QA Engineer
Responsibilities:
- Implement automated test cases that simulate user and system interactions during deployments to validate changes.
- Continuously update automated test suites to cover new features and requirements.
DevOps Engineer
Responsibilities:
- Integrate automated testing and rollback capabilities into the deployment pipeline to ensure rapid validation and recovery.
- Define rollback criteria and implement rollback mechanisms that are automatically triggered when deployment conditions are not met.
Release Manager
Responsibilities:
- Monitor the results of automated tests and ensure that rollbacks are initiated if conditions for successful deployment are not met.
- Oversee the rollback process and ensure that systems return to a known good state promptly.
Artifacts
- Automated Test Plan: A document detailing the automated test cases used to validate deployments, including tests for functionality, integration, and system interactions.
- Rollback Criteria Document: A document outlining the conditions that will trigger an automated rollback during deployment, such as test failures or deviations from expected metrics.
- Deployment Success Report: A report generated after each deployment, summarizing the results of automated tests and detailing any rollbacks performed.
Relevant AWS Tools
Testing and Validation Tools
- AWS CodeBuild: Automates the running of tests during deployment, including unit, integration, and end-to-end tests, ensuring that changes are validated before they reach production.
- AWS Device Farm: Tests applications across multiple environments and devices, providing insights into how changes will perform in different real-world conditions.
Rollback Tools
- AWS CodeDeploy: Supports automated rollback capabilities based on deployment health checks, allowing teams to revert to a known good state if deployment conditions are not met.
- AWS Elastic Beanstalk: Provides managed deployment options with automatic rollback to a previous version if an issue is detected during deployment.
Monitoring and Alerting Tools
- Amazon CloudWatch: Monitors the health and performance of deployments, providing real-time metrics and alerts that can trigger an automated rollback if deviations are detected.
- AWS Systems Manager: Automates the process of detecting and responding to deployment issues, including initiating rollbacks when pre-defined criteria are met.