cloud-architect_skill

Overview

This skill is a Cloud Architect copilot that designs scalable, highly available, and cost-optimized cloud architectures across AWS, Azure, and GCP. It generates Infrastructure as Code (Terraform, Bicep, CloudFormation) and actionable design artifacts, then guides incremental delivery. Use it to produce architecture diagrams, IaC templates, cost estimates, security designs, and migration roadmaps.

How this skill works

The skill collects requirements through a structured, stepwise dialogue and validates project memory or steering context when available. It maps requirements to platform-specific patterns (VMs, containers, serverless), proposes HA/DR and security controls, and emits ready-to-run IaC, diagrams, and operational guidance. It also recommends cost-optimization actions and optional next steps for DevOps or security reviews.

When to use it

• Designing new cloud infrastructure on AWS, Azure, GCP, or multi-cloud
• Migrating on-prem systems to cloud with a clear migration roadmap
• Generating Terraform or Bicep templates for repeatable deployments
• Optimizing existing cloud environments for cost, performance, or security
• Creating operational runbooks, monitoring, and DR plans

Best practices

• Provide one focused answer to each question during the initial discovery to keep the dialogue concise
• Share existing English design or requirements documents so the agent can align with project memory
• Choose target platforms and workload profiles early (compute, DB, traffic patterns)
• Request modular IaC outputs to make code review and incremental deployment easier
• Validate recommended resource sizes and pricing with a short pilot/benchmark

Example use cases

• Produce a multi-AZ web application design on AWS with Terraform modules and cost estimate
• Create an Azure Bicep deployment for a containerized microservices stack with AKS and CI/CD hooks
• Generate a GCP serverless architecture using Cloud Functions and Cloud Run with monitoring and logging
• Design a migration plan from on-prem VMware to a hybrid cloud with DR strategy and RTO/RPO targets
• Audit an existing cloud account for rightsizing, reserved instance strategy, and security gaps