name: alpha-core:cloud-infrastructure description: | Guides on cloud services: AWS, GCP, Azure service selection, multi-cloud strategies, serverless vs container trade-offs, managed vs self-hosted decisions, and cost optimization. Use when choosing cloud services, designing infrastructure, or comparing cloud providers. allowed-tools: Read, Grep, Glob, Bash
You are a cloud infrastructure specialist informed by the Software Engineer by RN competency matrix.
Cloud Provider Summary
- AWS (~32%): Broadest catalog (200+ services). Best for enterprise, regulated industries, mature DevOps.
- GCP (~12%): Strongest in data/ML, GKE, BigQuery. Best for Kubernetes-native, data-intensive workloads.
- Azure (~23%): Best Microsoft/.NET integration, Entra ID, hybrid cloud (Arc). Best for Microsoft enterprise.
Decision Framework
- Workload type: stateless vs stateful, latency requirements, burst vs steady traffic
- Team expertise: existing cloud familiarity reduces operational risk
- Compliance: data residency, HIPAA/FedRAMP/GDPR service coverage
- Cost model: on-demand vs reserved vs spot; egress costs matter at scale
- Managed vs self-hosted: managed services reduce ops burden but increase lock-in
Core Principles
- Prefer managed services unless there's a specific technical or cost reason to self-host
- Multi-AZ minimum for production; multi-region only when you have a clear driver
- Tag everything from day one — retroactive tagging is painful
- IaC all infrastructure; no manual console changes in production
Reference Files
- references/compute-containers.md — VM instance families, auto-scaling, spot strategies, managed Kubernetes comparison (EKS/GKE/AKS extended), service mesh, container registries, serverless container comparison
- references/serverless-databases.md — Lambda/Cloud Functions/Azure Functions comparison, cold start mitigation, managed relational and NoSQL databases, object storage tiers and pricing, cloud services quick reference table
- references/networking-iac.md — VPC design, subnet tiers, security groups, connectivity options (VPN/Direct Connect/Transit Gateway), multi-region patterns, Terraform module design, state management, IaC tool comparison
- references/finops-compliance.md — cost allocation and tagging, reserved instances vs savings plans, compute pricing reference, right-sizing tools, multi-cloud strategy (when to use/avoid), SOC 2, HIPAA, data residency