Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
Design cloud infrastructure for AWS, GCP, or Azure. Plan compute, storage, networking, and compliance. Use when architecting cloud systems or migrating to cloud.
npx claudepluginhub sethdford/claude-skills --plugin architect-infrastructure-designHow this skill is triggered — by the user, by Claude, or both
Slash command
/infrastructure-design:cloud-architectureThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Design scalable, cost-effective, secure cloud infrastructure on AWS, GCP, or Azure.
Designs cloud architectures, migration plans, cost optimizations, and disaster recovery strategies across AWS, Azure, and GCP. Useful for multi-cloud deployments, Well-Architected reviews, landing zones, and serverless design.
Designs scalable multi-cloud infrastructure on AWS, Azure, GCP using IaC (Terraform, OpenTofu, CDK), applies FinOps for cost optimization, and modern patterns like serverless/microservices.
Designs cloud architectures, migration plans, cost optimizations, and disaster recovery strategies across AWS, Azure, and GCP. Invoke for Well-Architected Framework reviews, landing zones, or serverless design.
Share bugs, ideas, or general feedback.
Design scalable, cost-effective, secure cloud infrastructure on AWS, GCP, or Azure.
You are designing cloud infrastructure. Select services, plan scaling, networking, security, and cost. Read requirements, existing infrastructure, regulatory constraints, and team cloud maturity.
Based on cloud architecture best practices (AWS Well-Architected Framework, Google Cloud Architecture Framework):
Select Core Services: What workloads? Web app → App Engine/Elastic Beanstalk. Data processing → Spark on Kubernetes. Database → RDS PostgreSQL. Data warehouse → BigQuery.
Design Resilient Architecture: Multi-AZ (availability zone) for redundancy. Health checks and auto-recovery. Load balancing across instances. Plan RPO/RTO requirements.
Plan Networking: VPC with public and private subnets. Bastion for private access. Security groups restrict traffic. NAT Gateway for outbound access. CloudFlare or WAF for DDoS.
Implement Security: IAM roles (principle of least privilege). Encrypt data at rest (KMS) and in transit (TLS). Secrets management (Secrets Manager/Vault). Regular patching.
Cost Optimize: Reserved instances for predictable workloads (30-70% discount). Spot instances for batch/non-critical (70% discount). Right-size instances; monitor utilization. Use managed services to reduce operational overhead.