Cloud & Infrastructure Topics
Cloud platform services, infrastructure architecture, Infrastructure as Code, environment provisioning, and infrastructure operations. Covers cloud service selection, infrastructure provisioning patterns, container orchestration (Kubernetes), multi-cloud and hybrid architectures, infrastructure cost optimization, and cloud platform operations. For CI/CD pipeline and deployment automation, see DevOps & Release Engineering. For cloud security implementation, see Security Engineering & Operations. For data infrastructure design, see Data Engineering & Analytics Infrastructure.
Observability and Monitoring Architecture
Designing and architecting end to end observability and monitoring systems that scale, remain reliable under load, and do not become single points of failure. Topics include deciding which telemetry to collect and why including metrics logs traces and events, instrumentation strategies, collection models such as push versus pull, high throughput telemetry ingestion and pipeline design, time series storage and compression, aggregation and partitioning strategies, metric cardinality and retention tradeoffs, distributed tracing propagation and sampling strategies, log aggregation and secure storage, selection of storage backends and time series databases, storage tiering and cost optimization, query and dashboard performance considerations, access control and multi tenancy, integration with deployment pipelines and tooling, and design patterns for self healing telemetry pipelines. Senior level assessments include designing scalable ingestion and aggregation architectures, storage tiering and query performance optimization, cost and operational tradeoffs, and organizational impacts of observability data.
AWS Well-Architected Framework Principles
Principles and guidelines from the AWS Well-Architected Framework for designing, building, and operating robust, secure, efficient, and cost-optimized systems on AWS. Covers the five pillars—Operational Excellence, Security, Reliability, Performance Efficiency, and Cost Optimization—and related architecture decisions, patterns, and best practices.
Multi Cloud and Hybrid Cloud Architecture
Designing systems that span multiple cloud providers or combine cloud with on premise infrastructure, including when and why to choose multi cloud or hybrid deployments and the trade offs involved. Candidates should be able to justify multi cloud and hybrid approaches with respect to vendor independence, resilience, regulatory and data residency requirements, and cost versus the increased operational and engineering complexity. Core technical concerns include workload portability strategies such as containerization and Kubernetes, platform abstraction layers and trade offs between managed vendor services and portable open source components. Data management topics include replication topologies, consistency models, disaster recovery, backup strategies, data gravity and egress cost implications. Networking and connectivity considerations cover secure cross provider links, virtual private networks, direct connections and transit architectures, service mesh and the latency and throughput implications for stateful and latency sensitive services. Identity and access management and policy consistency across providers involves identity federation, single sign on, centralized policy enforcement, and secrets and key management. Observability and operations include centralized logging, metrics and tracing, alerting, deployment and release strategies across heterogeneous environments, automation and infrastructure as code, cost governance and tagging, security boundary definition, compliance, runbooks and incident response. Interviewers commonly assess the candidate's ability to articulate concrete trade offs, propose migration and portability approaches, and recommend tooling and governance patterns to operate multi provider systems reliably.
Amazon Web Services Core Services
Comprehensive knowledge of the foundational Amazon Web Services that are commonly used to design, deploy, and operate cloud applications. This includes compute services such as Amazon Elastic Compute Cloud for virtual machines and instance families, Amazon Web Services Lambda for serverless functions, and Amazon Elastic Beanstalk for managed application platforms; storage services such as Amazon Simple Storage Service for object storage, Amazon Elastic Block Store for block volumes, and Amazon Elastic File System for shared file storage; database services such as Amazon Relational Database Service for managed relational databases, Amazon DynamoDB for NoSQL, and Amazon ElastiCache for in memory caching; networking and content delivery including Amazon Virtual Private Cloud networking concepts, subnets, security groups, load balancers, and Amazon CloudFront; container and orchestration options such as Amazon Elastic Container Service and Amazon Elastic Kubernetes Service; and management and security services including Identity and Access Management, Amazon CloudWatch monitoring and logging, Auto Scaling, and cost and service limit considerations. Candidates should understand core service characteristics, common configuration choices and trade offs, operational considerations such as high availability and fault tolerance, basic security and compliance approaches, performance and cost optimization, and guidance for selecting one service over another for typical application patterns.
Infrastructure as Code and Configuration Management
Infrastructure as Code and Configuration Management covers designing, implementing, and operating infrastructure defined as code and the practices that keep that infrastructure consistent and auditable. Topics include Infrastructure as Code principles and patterns, declarative versus imperative approaches, idempotency, state management, module and template design for reusable infrastructure, version control integration, testing and validation of infrastructure code, drift detection and remediation, safe rollout and rollback strategies, policy as code and Git operations for infrastructure, and how to scan and remediate infrastructure misconfigurations. This topic also encompasses integration points with system configuration tools and considerations for managing secrets and secure defaults within infrastructure definitions.
Networking, VPC, and Connectivity
Deep understanding of AWS VPC architecture including subnets (public and private), route tables, Network Address Translation (NAT), internet gateways, and VPC endpoints. Knowledge of security groups and network ACLs. Understanding of VPN and AWS Direct Connect for hybrid connectivity. DNS and Route 53 routing policies.