Generated banner for Cloud Solution Architect
Generated logo for Cloud Solution Architect

Cloud Solution Architect

MicrosoftOfficialPublished by Microsoft

  • Skill
  • Guidelines
  • Software development
  • MIT
  • No issues found

From the author

Transform the agent into a Cloud Solution Architect following Azure Architecture Center best practices. Use when designing cloud architectures, reviewing system designs, selecting architecture styles, applying cloud design patterns, making technology choices, or conducting Well-Architected Framework reviews.
— the description by Microsoft

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill configures an AI agent to act as a Cloud Solution Architect, providing structured guidance based on the Azure Architecture Center. It enables the agent to assist with designing production-grade cloud systems, selecting appropriate architecture styles, applying proven design patterns, and conducting systematic reviews against the Well-Architected Framework (WAF). The agent is equipped with knowledge of 10 core design principles, 44 cloud design patterns, and decision frameworks for technology selection, ensuring that architectural decisions are well-reasoned and aligned with industry-standard best practices.

What it does

  • Provides guidance on selecting architecture styles like N-tier, Microservices, and Event-driven.
  • Maps 44 cloud design patterns to WAF pillars for reliability, security, and performance.
  • Offers a decision framework for choosing compute, storage, data, and messaging technologies.
  • Conducts systematic architecture reviews using the Well-Architected Framework.
  • Identifies performance antipatterns and suggests remediation strategies.
  • Supports the creation of Architecture Decision Records (ADRs) for project documentation.

When to use it

  • When designing a new cloud-based application or system architecture.
  • When reviewing an existing system design for potential improvements or bottlenecks.
  • When evaluating technology choices for compute, data, or messaging services.
  • When performing a Well-Architected Framework review to ensure system quality.
  • When troubleshooting performance issues caused by common cloud antipatterns.

Advantages

  • Ensures architectural consistency by following official Azure best practices.
  • Facilitates informed decision-making through structured tradeoff analysis.
  • Promotes the use of resilient, scalable, and cost-effective design patterns.
  • Standardizes the documentation of architectural decisions via ADR templates.
  • Helps align technical choices with specific business requirements and SLAs.

Usage examples

“I am designing a high-traffic e-commerce platform. Which architecture style should I choose?”
The agent will compare styles like Microservices versus N-tier based on your team's autonomy, domain complexity, and scaling needs, recommending the best fit.
“Our application is experiencing performance issues under load. Can you help me identify potential antipatterns?”
The agent will review your current design against known performance antipatterns like 'Busy Database' or 'Chatty I/O' and suggest specific fixes.
“Help me conduct a Well-Architected Framework review for my current Azure deployment.”
The agent will guide you through a systematic assessment of your architecture across the five WAF pillars, identifying risks and improvement opportunities.
“We need to choose a messaging service for our event-driven system. What are the options?”
The agent will present a decision framework comparing Service Bus, Event Hubs, and Event Grid based on your specific throughput and ordering requirements.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/microsoft/cloud-solution-architect/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip cloud-solution-architect.zip -d .agents/skills

Documentation by Microsoft

Cloud Solution Architect

Overview

Design well-architected, production-grade cloud systems following Azure Architecture Center best practices. This skill provides:

  • 10 design principles for Azure applications

  • 6 architecture styles with selection guidance

  • 44 cloud design patterns mapped to WAF pillars

  • Technology choice frameworks for compute, storage, data, messaging

  • Performance antipatterns to avoid

  • Architecture review workflow for systematic design validation


Ten Design Principles for Azure Applications

#PrincipleKey Tactics
1Design for self-healingRetry with backoff, circuit breaker, bulkhead isolation, health endpoint monitoring, graceful degradation
2Make all things redundantEliminate single points of failure, use availability zones, deploy multi-region, replicate data
3Minimize coordinationDecouple services, use async messaging, embrace eventual consistency, use domain events
4Design to scale outHorizontal scaling, autoscaling rules, stateless services, avoid session stickiness, partition workloads
5Partition around limitsData partitioning (shard/hash/range), respect compute & network limits, use CDNs for static content
6Design for operationsStructured logging, distributed tracing, metrics & dashboards, runbook automation, infrastructure as code
7Use managed servicesPrefer PaaS over IaaS, reduce operational burden, leverage built-in HA/DR/scaling
8Use an identity serviceMicrosoft Entra ID, managed identity, RBAC, avoid storing credentials, zero-trust principles
9Design for evolutionLoose coupling, versioned APIs, backward compatibility, async messaging for integration, feature flags
10Build for business needsDefine SLAs/SLOs, establish RTO/RPO targets, domain-driven design, cost modeling, composite SLAs

Architecture Styles

StyleDescriptionWhen to UseKey Services
N-tierHorizontal layers (presentation, business, data)Traditional enterprise apps, lift-and-shiftApp Service, SQL Database, VNets
Web-Queue-WorkerWeb frontend → message queue → backend workerModerate-complexity apps with long-running tasksApp Service, Service Bus, Functions
MicroservicesSmall autonomous services, bounded contexts, independent deployComplex domains, independent team scalingAKS, Container Apps, API Management
Event-drivenPub/sub model, event producers/consumersReal-time processing, IoT, reactive systemsEvent Hubs, Event Grid, Functions
Big dataBatch + stream processing pipelineAnalytics, ML pipelines, large-scale dataSynapse, Data Factory, Databricks
Big computeHPC, parallel processingSimulations, modeling, rendering, genomicsBatch, CycleCloud, HPC VMs
Selection Criteria
  • Domain complexity → Microservices (high), N-tier (low-medium)

  • Team autonomy → Microservices (independent teams), N-tier (single team)

  • Data volume → Big data (TB+), others (GB)

  • Latency requirements → Event-driven (real-time), Web-Queue-Worker (tolerant)


Cloud Design Patterns

44 patterns organized by primary concern. WAF pillar mapping: R=Reliability, S=Security, CO=Cost Optimization, OE=Operational Excellence, PE=Performance Efficiency.

Messaging & Communication
PatternSummaryPillars
Asynchronous Request-ReplyDecouple request/response with polling or callbacksR, PE
Claim CheckSplit large messages; store payload separately, pass referenceR, PE
ChoreographyServices coordinate via events without central orchestratorR, OE
Competing ConsumersMultiple consumers process messages from shared queue concurrentlyR, PE
Messaging BridgeConnect incompatible messaging systemsR, OE
Pipes and FiltersDecompose complex processing into reusable filter stagesR, OE
Priority QueuePrioritize requests so higher-priority work is processed firstR, PE
Publisher/SubscriberDecouple senders from receivers via topics/subscriptionsR, PE
Queue-Based Load LevelingBuffer requests with a queue to smooth intermittent loadsR, PE
Sequential ConvoyProcess related messages in order while allowing parallel groupsR, PE
Reliability & Resilience
PatternSummaryPillars
BulkheadIsolate resources per workload to prevent cascading failureR
Circuit BreakerStop calling a failing service; fail fast to protect resourcesR
Compensating TransactionUndo previously committed steps when a later step failsR
Health Endpoint MonitoringExpose health checks for load balancers and orchestratorsR, OE
Leader ElectionCoordinate distributed instances by electing a leaderR
RetryHandle transient faults by retrying with exponential backoffR
SagaManage data consistency across microservices with compensating transactionsR
Scheduler Agent SupervisorCoordinate distributed actions with retry and failure handlingR
Data Management
PatternSummaryPillars
Cache-AsideLoad data on demand into cache from data storePE
CQRSSeparate read and write models for independent scalingPE, R
Event SourcingStore state as append-only sequence of domain eventsR, OE
Index TableCreate indexes over frequently queried fields in data storesPE
Materialized ViewPre-compute views over data for efficient queriesPE
ShardingDistribute data across partitions for scale and performancePE, R
Static Content HostingServe static content from cloud storage/CDN directlyPE, CO
Valet KeyGrant clients limited direct access to storage resourcesS, PE
Design & Structure
PatternSummaryPillars
AmbassadorOffload cross-cutting concerns to a helper sidecar proxyOE
Anti-Corruption LayerTranslate between new and legacy system modelsOE, R
Backends for FrontendsCreate separate backends per frontend type (mobile, web, etc.)OE, PE
Compute Resource ConsolidationCombine multiple workloads into fewer compute instancesCO
External Configuration StoreExternalize configuration from deployment packagesOE
SidecarDeploy helper components alongside the main serviceOE
Strangler FigIncrementally migrate legacy systems by replacing piecesOE, R
Security & Access
PatternSummaryPillars
Federated IdentityDelegate authentication to an external identity providerS
GatekeeperProtect services using a dedicated broker that validates requestsS
QuarantineIsolate and validate external assets before allowing useS
Rate LimitingControl consumption rate of resources by consumersR, S
ThrottlingControl resource consumption to sustain SLAs under loadR, PE
Deployment & Scaling
PatternSummaryPillars
Deployment StampsDeploy multiple independent copies of application componentsR, PE
Edge Workload ConfigurationConfigure workloads differently across diverse edge devicesOE
Gateway AggregationAggregate multiple backend calls into a single client requestPE
Gateway OffloadingOffload shared functionality (SSL, auth) to a gatewayOE, S
Gateway RoutingRoute requests to multiple backends using a single endpointOE
GeodeDeploy backends to multiple regions for active-active servingR, PE

See Design Patterns Reference for detailed implementation guidance.


Technology Choices

Decision Framework

For each technology area, evaluate: requirements → constraints → tradeoffs → select.

AreaKey OptionsSelection Criteria
ComputeApp Service, Functions, Container Apps, AKS, VMs, BatchHosting model, scaling, cost, team skills
StorageBlob Storage, Data Lake, Files, Disks, Managed LustreAccess patterns, throughput, cost tier
Data storesSQL Database, Cosmos DB, PostgreSQL, Redis, Table StorageConsistency model, query patterns, scale
MessagingService Bus, Event Hubs, Event Grid, Queue StorageOrdering, throughput, pub/sub vs queue
NetworkingFront Door, Application Gateway, Load Balancer, Traffic ManagerGlobal vs regional, L4 vs L7, WAF
AI servicesAzure OpenAI, AI Search, AI Foundry, Document IntelligenceModel needs, data grounding, orchestration
ContainersContainer Apps, AKS, Container InstancesOperational control vs simplicity

See Technology Choices Reference for detailed decision trees.


Best Practices

PracticeKey Guidance
API designRESTful conventions, resource-oriented URIs, HATEOAS, versioning via URL path or header
API implementationAsync operations, pagination, idempotent PUT/DELETE, content negotiation, ETag caching
AutoscalingScale on metrics (CPU, queue depth, custom), cool-down periods, predictive scaling, scale-in protection
Background jobsUse queues or scheduled triggers, idempotent processing, poison message handling, graceful shutdown
CachingCache-aside pattern, TTL policies, cache invalidation strategies, distributed cache for multi-instance
CDNStatic asset offloading, cache-busting with versioned URLs, geo-distribution, HTTPS enforcement
Data partitioningHorizontal (sharding), vertical, functional partitioning; partition key selection for even distribution
Partitioning strategiesHash-based, range-based, directory-based; rebalancing approach, cross-partition query avoidance
Host name preservationPreserve original host header through proxies/gateways for cookies, redirects, auth flows
Message encodingSchema evolution (Avro/Protobuf), backward/forward compatibility, schema registry
Monitoring & diagnosticsStructured logging, distributed tracing (W3C Trace Context), metrics, alerts, dashboards
Transient fault handlingRetry with exponential backoff + jitter, circuit breaker, idempotency keys, timeout budgets

See Best Practices Reference for implementation details.


Performance Antipatterns

Avoid these common patterns that degrade performance under load:

AntipatternProblemFix
Busy DatabaseOffloading too much processing to the databaseMove logic to application tier, use caching
Busy Front EndResource-intensive work on frontend request threadsOffload to background workers/queues
Chatty I/OMany small I/O requests instead of fewer large onesBatch requests, use bulk APIs, buffer writes
Extraneous FetchingRetrieving more data than neededProject only required fields, paginate, filter server-side
Improper InstantiationRecreating expensive objects per requestUse singletons, connection pooling, HttpClientFactory
Monolithic PersistenceSingle data store for all data typesPolyglot persistence — right store for each workload
No CachingRepeatedly fetching unchanged dataCache-aside pattern, CDN, output caching, Redis
Noisy NeighborOne tenant consuming all shared resourcesBulkhead isolation, per-tenant quotas, throttling
Retry StormAggressive retries overwhelming a recovering serviceExponential backoff + jitter, circuit breaker, retry budgets
Synchronous I/OBlocking threads on I/O operationsAsync/await, non-blocking I/O, reactive streams

Mission-Critical Design

For workloads targeting 99.99%+ SLO, address these design areas:

Design AreaKey Considerations
Application platformMulti-region active-active, availability zones, Container Apps or AKS with zone redundancy
Application designStateless services, idempotent operations, graceful degradation, bulkhead isolation
NetworkingAzure Front Door (global LB), DDoS Protection, private endpoints, redundant connectivity
Data platformMulti-region Cosmos DB, zone-redundant SQL, async replication, conflict resolution
Deployment & testingBlue-green deployments, canary releases, chaos engineering, automated rollback
Health modelingComposite health scores, dependency health tracking, automated remediation, SLI dashboards
SecurityZero-trust, managed identity everywhere, key rotation, WAF policies, threat modeling
Operational proceduresAutomated runbooks, incident response playbooks, game days, postmortems

See Mission-Critical Reference for detailed guidance.


Well-Architected Framework (WAF) Pillars

Every architecture decision should be evaluated against all five pillars:

PillarFocusKey Questions
ReliabilityResiliency, availability, disaster recoveryWhat is the RTO/RPO? How does it handle failures? Is there redundancy?
SecurityThreat protection, identity, data protectionIs identity managed? Is data encrypted? Are there network controls?
Cost OptimizationCost management, efficiency, right-sizingIs compute right-sized? Are there reserved instances? Is there waste?
Operational ExcellenceMonitoring, deployment, automationIs deployment automated? Is there observability? Are there runbooks?
Performance EfficiencyScaling, load testing, performance targetsCan it scale horizontally? Are there performance baselines? Is caching used?
WAF Tradeoff Matrix
Optimizing for...May impact...
Reliability (redundancy)Cost (more resources)
Security (isolation)Performance (added latency)
Cost (consolidation)Reliability (shared failure domains)
Performance (caching)Cost (cache infrastructure), Reliability (stale data)

Architecture Review Workflow

When reviewing or designing a system, follow this structured approach:

Step 1: Identify Requirements
Functional: What must the system do?
Non-functional:
  - Availability target (e.g., 99.9%, 99.99%)
  - Latency requirements (p50, p95, p99)
  - Throughput (requests/sec, messages/sec)
  - Data residency and compliance
  - Recovery targets (RTO, RPO)
  - Cost constraints
Step 2: Select Architecture Style

Match requirements to architecture style using the selection criteria table above.

Step 3: Choose Technology Stack

Use the technology choices decision framework. Prefer managed services (PaaS) over IaaS.

Step 4: Apply Design Patterns

Select relevant patterns from the 44 cloud design patterns based on identified concerns.

Step 5: Address Cross-Cutting Concerns
  • Identity & access — Microsoft Entra ID, managed identity, RBAC

  • Monitoring — Application Insights, Azure Monitor, Log Analytics

  • Security — Network segmentation, encryption at rest/in transit, Key Vault

  • CI/CD — GitHub Actions, Azure DevOps Pipelines, infrastructure as code

Step 6: Validate Against WAF Pillars

Review each pillar systematically. Document tradeoffs explicitly.

Step 7: Document Decisions

Use Architecture Decision Records (ADRs):

# ADR-NNN: [Decision Title]

## Status: [Proposed | Accepted | Deprecated]

## Context
[What is the issue we're addressing?]

## Decision
[What did we decide and why?]

## Consequences
[What are the positive and negative impacts?]

References


Source

Content derived from the Azure Architecture Center — Microsoft's official guidance for cloud solution architecture on Azure. Covers design principles, architecture styles, cloud design patterns, technology choices, best practices, performance antipatterns, mission-critical design, and the Well-Architected Framework.

Files

references/performance-antipatterns.md

Performance Antipatterns

Ten common performance antipatterns in cloud applications and how to resolve them.


1. Busy Database

Description: Offloading too much processing to a data store. Using stored procedures for formatting, string manipulation, or complex calculations that belong in the application tier.

Why it happens:

  • Database viewed as a service rather than a repository

  • Developers write queries that format data for direct display

  • Attempts to correct Extraneous Fetching by pushing compute to the database

Symptoms:

  • Disproportionate decline in throughput and response times for database operations

How to detect:

  • Performance monitoring of database activity

  • Examine work performed during slow periods

How to fix:

  • Move processing (formatting, string manipulation, calculations) to application tiers

  • Limit the database to data access operations (aggregation is acceptable)

  • Don't move processing out if it causes the database to transfer far more data (Extraneous Fetching)

Example scenario: A SQL query performs XML formatting, string concatenation, and locale-specific formatting in T-SQL instead of returning raw data and letting application code handle presentation.


2. Busy Front End

Description: Moving resource-intensive tasks onto foreground/UI threads instead of background threads.

Why it happens:

  • Processing done synchronously in request handlers

Symptoms:

  • High latency on requests

  • Poor user responsiveness

How to detect:

  • Monitor thread utilization and CPU usage on the front-end tier

How to fix:

  • Move resource-intensive tasks to background threads or services (Azure Functions, WebJobs)

Example scenario: A web API controller performs image resizing synchronously within the HTTP request pipeline, blocking the thread and causing timeouts for other users during peak load.


3. Chatty I/O

Description: Continually sending many small network requests instead of fewer larger ones.

Why it happens:

  • Following object-oriented patterns that make many small calls

  • Individual property gets instead of batch reads

Symptoms:

  • High number of I/O operations

  • High latency due to network round trips

How to detect:

  • Monitor the number of I/O requests and their sizes

How to fix:

  • Bundle multiple smaller requests into fewer larger ones

  • Use caching to avoid repeated calls

  • Read data in bulk

Example scenario: An application retrieves a user profile by making separate API calls for name, email, address, and preferences instead of a single call that returns the complete profile object.


4. Extraneous Fetching

Description: Retrieving more data than needed, resulting in unnecessary I/O and memory consumption.

Why it happens:

  • SELECT * queries

  • Fetching all columns or rows when only a subset is needed

Symptoms:

  • High memory usage

  • Excessive bandwidth consumption

How to detect:

  • Profile queries and check data transfer sizes

How to fix:

  • Request only needed data columns and rows

  • Use pagination and projections

Example scenario: An order history page runs SELECT * FROM Orders and filters in application code, transferring millions of rows when the user only sees the 20 most recent orders.


5. Improper Instantiation

Description: Repeatedly creating and destroying objects designed to be shared and reused, such as HttpClient, database connections, or service clients.

Why it happens:

  • Not understanding object lifecycle

  • Creating new instances per request

Symptoms:

  • Port exhaustion

  • Socket exhaustion

  • Connection pool depletion

How to detect:

  • Monitor connection counts, socket usage, and object creation rates

How to fix:

  • Use singleton or static instances for shared clients

  • Use connection pooling

  • Use IHttpClientFactory for HTTP clients

Example scenario: A web application creates a new HttpClient instance for every incoming request. Under load, available sockets are exhausted and requests fail with SocketException errors.


6. Monolithic Persistence

Description: Using one data store for data with very different usage patterns.

Why it happens:

  • Simplicity of a single database

  • Legacy design decisions

Symptoms:

  • Performance degradation as different workloads compete for the same resources

How to detect:

  • Monitor data store metrics and identify competing access patterns

How to fix:

  • Separate data by usage pattern into appropriate stores (hot/warm/cold)

  • Apply polyglot persistence — use the right store for each data type

Example scenario: A single SQL database handles both high-throughput transactional writes and complex analytical reporting queries, causing lock contention that degrades both workloads.


7. No Caching

Description: Failing to cache frequently accessed data that changes infrequently.

Why it happens:

  • Not considering a caching strategy

  • Assuming the database can handle all read traffic

Symptoms:

  • Repeated identical queries

  • High database load

  • Slow response times

How to detect:

  • Monitor cache hit ratios and look for repeated identical queries

How to fix:

  • Implement the Cache-Aside pattern

  • Use Azure Cache for Redis

  • Set appropriate TTLs based on data volatility

Example scenario: A product catalog page queries the database on every page load for data that only changes once a day, generating thousands of identical queries per hour.


8. Noisy Neighbor

Description: A single tenant consumes a disproportionate amount of shared resources, starving other tenants.

Why it happens:

  • Multi-tenant systems without resource isolation or throttling

Symptoms:

  • Other tenants experience degraded performance

  • Resource starvation for well-behaved tenants

How to detect:

  • Monitor per-tenant resource usage and identify outliers

How to fix:

  • Implement tenant isolation, throttling, and quotas

  • Use the Bulkhead pattern to partition resources

  • Separate compute per tenant if needed

Example scenario: In a shared SaaS platform, one tenant runs a bulk data import that saturates the database connection pool, causing timeout errors for all other tenants.


9. Retry Storm

Description: Retrying failed requests too aggressively, amplifying failures during outages.

Why it happens:

  • Aggressive retry policies without backoff

  • All clients retry simultaneously (thundering herd)

Symptoms:

  • Cascading failures

  • Overwhelming services that are trying to recover

How to detect:

  • Monitor retry rates and correlate with service recovery time

How to fix:

  • Use exponential backoff with jitter

  • Implement the Circuit Breaker pattern

  • Cap retry attempts

Example scenario: A downstream service goes offline for 30 seconds. Hundreds of clients immediately retry every 100ms with no backoff, generating 10x normal traffic and preventing the service from recovering for several minutes.


10. Synchronous I/O

Description: Blocking the calling thread while I/O completes.

Why it happens:

  • Using synchronous APIs for network or disk operations

Symptoms:

  • Thread pool exhaustion

  • Poor scalability under load

  • UI freezing in client applications

How to detect:

  • Monitor thread pool usage and identify blocking calls

How to fix:

  • Use async/await patterns

  • Use non-blocking I/O and async APIs

Example scenario: A web API makes synchronous HTTP calls to three downstream services sequentially. Under load, all thread pool threads are blocked waiting for responses, and the server can no longer accept new requests.


Source: Azure Architecture Center

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Microsoft
Publisher
Microsoft (Official)
Source
microsoft/skills · .github/skills/cloud-solution-architect · commit 0696600
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Microsoft.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download cloud-solution-architect.zip