# Platform

> Cloud platform architecture and services

- Skill: `ffsshhttiikk/platform` (Agent Skill)
- Install (CLI): `npx skillmds@latest add ffsshhttiikk/platform`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ffsshhttiikk/platform/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- License: MIT
- Author: ffsshhttiikk (https://skillmd.com/u/ffsshhttiikk)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/ffsshhttiikk/platform

---


## What I do

- Design cloud platform architectures
- Select appropriate cloud services
- Implement multi-tenant platforms
- Configure cloud networking
- Manage cloud identities and access
- Optimize cloud resource utilization

## When to use me

- When building cloud platforms
- When selecting cloud services
- When designing multi-tenant systems
- When implementing shared services
- When creating cloud center of excellence
- When governing cloud usage

## Key Concepts

### Cloud Platform Architecture

```
┌─────────────────────────────────────────────────────────┐
│                    Shared Services                       │
│  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────┐    │
│  │  DNS    │  │  CDN    │  │  Email  │  │  Auth   │    │
│  └─────────┘  └─────────┘  └─────────┘  └─────────┘    │
└──────────────────────┬──────────────────────────────────┘
                       │
┌──────────────────────▼──────────────────────────────────┐
│                  Network Platform                         │
│  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────┐    │
│  │  VPC    │  │  VPN    │  │ Firewall│  │  DNS    │    │
│  └─────────┘  └─────────┘  └─────────┘  └─────────┘    │
└──────────────────────┬──────────────────────────────────┘
                       │
┌──────────────────────▼──────────────────────────────────┐
│                  Compute Platform                         │
│  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────┐    │
│  │  VMs    │  │Containers│ │Functions│ │ K8s     │    │
│  └─────────┘  └─────────┘  └─────────┘  └─────────┘    │
└──────────────────────┬──────────────────────────────────┘
                       │
┌──────────────────────▼──────────────────────────────────┐
│                   Data Platform                           │
│  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────┐    │
│  │Object   │  │   DB    │  │  Cache  │  │  Data   │    │
│  │Storage  │  │         │  │         │  │ Lake    │    │
│  └─────────┘  └─────────┘  └─────────┘  └─────────┘    │
└─────────────────────────────────────────────────────────┘
```

### Service Selection Criteria

| Requirement | AWS | Azure | GCP |
|-------------|-----|-------|-----|
| Compute | EC2, Lambda | VM, Functions | Compute Engine, Cloud Functions |
| Containers | ECS, EKS | Container Instances, AKS | Cloud Run, GKE |
| Serverless | Lambda | Functions | Cloud Functions, Cloud Run |
| Database | RDS, DynamoDB | SQL, Cosmos DB | Cloud SQL, Firestore |
| Analytics | Athena, Redshift | Synapse, Data Lake | BigQuery |
| AI/ML | SageMaker | Azure ML | Vertex AI |

### Multi-Account Setup

```hcl
# AWS Organizations
resource "aws_organizations_organization" "main" {
  feature_set: "ALL"
}

resource "aws_organizations_organizational_unit" "production" {
  name      = "Production"
  parent_id = aws_organizations_organization.main.roots[0].id
}

resource "aws_organizations_account" "prod-network" {
  name  = "prod-network"
  email = "network@company.com"
  parent_id = aws_organizations_organizational_unit.production.id
}

resource "aws_organizations_account" "prod workloads" {
  name  = "prod-workloads"
  email = "workloads@company.com"
  parent_id = aws_organizations_organizational_unit.production.id
}
```

### Landing Zone

```hcl
# Control Tower Landing Zone
module "landing_zone" {
  source  = "aws-quickstart/qs-cfn-labs"
  version = "1.0.0"
  
  # Shared Account
  master_account_email = "master@company.com"
  master_account_name = "OrganizationMaster"
  
  # Log Archive
  log_archive_account_email = "logs@company.com"
  
  # Audit
  audit_account_email = "audit@company.com"
  
  # Organizations
  organizational_units = ["Production", "Development", "Sandbox"]
  
  #SSO
  sso_enabled = true
  sso_email = "sso-admin@company.com"
}
```

### Well-Architected Framework

1. **Operational Excellence**
   - Automate changes
   - Respond to events
   - Define baselines

2. **Security**
   - Identity foundation
   - Protect data
   - Respond to threats

3. **Reliability**
   - Handle scale
   - Recover from failure
   - Test resilience

4. **Performance Efficiency**
   - Select architectures
   - Review continuously
   - Monitor tradeoffs

5. **Cost Optimization**
   - Adopt consumption model
   - Analyze and attribute
   - Use managed services

6. **Sustainability**
   - Understand impact
   - Maximize utilization
   - Reduce downstream impact