Cloud architecture guides

Guides on landing zones, networking, identity, Kubernetes, reliability, migration, FinOps, AI infrastructure, APAC architecture and Alibaba Cloud.

Cloud architecture

Guides for architects designing production topology: landing-zone shape, account structure and the decisions that belong in ADRs rather than slide decks.

Landing zones

Guides for platform teams building the baseline environment: account vending, guardrails and what must exist before the first production workload.

Networking

Guides for network and platform engineers choosing hub-and-spoke layout, private endpoints, DNS and egress paths, including the cost of those paths.

Identity and security

Guides for identity owners designing IAM, workload identity and cross-cloud trust without copying another provider’s role model.

Kubernetes and containers

Guides for platform engineers building Alibaba Cloud ACK with OpenTofu, and for FinOps teams allocating cluster spend by namespace and label.

Serverless

Guides for architects deciding when functions replace long-running compute, and when a cluster or VM is still the cheaper operational surface.

Cloud migration

Guides for teams assessing readiness, mapping dependencies and writing a cutover risk register before they move production systems.

FinOps and cost optimization

Guides for FinOps and platform teams on tagging, allocation, anomaly response and commitments they can defend after usage changes.

AI infrastructure

Guides for ML and platform leads separating GPU training reservations, inference unit cost and idle capacity from a generic cloud invoice.

APAC architecture

Guides for teams whose users or regulated data sit in APAC: region selection, residency constraints and Alibaba Cloud when it is the local control plane.

Alibaba Cloud

APAC account design, a private ACK cluster, node pools and OpenTofu state, plus related networking, security and FinOps pages.