AWS Well-Architected Framework: Hands-On Lab

Welcome to this guided lab on the AWS Well-Architected Framework. While the framework provides a set of theoretical best practices spanning six core pillars, AWS also provides the AWS Well-Architected Tool—a practical service to help you measure your workloads against these principles.

In this 30-minute lab, you will define a workload, apply the Well-Architected lens, and conduct a baseline architectural review.

---

Prerequisites

Before beginning this lab, ensure you have the following:

• An active AWS Account with Administrator or WellArchitectedConsoleFullAccess IAM permissions.
• AWS CLI installed and configured locally (e.g., via aws configure).
• Familiarity with the six pillars of the framework: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.

[!NOTE] The AWS Well-Architected Tool is available at no additional charge. You only pay for any underlying AWS resources you choose to provision based on the tool's recommendations. In this lab, we will not provision any paid infrastructure.

---

Learning Objectives

By completing this lab, you will be able to:

1. Define an AWS workload programmatically and via the console.
2. Navigate the six pillars of the AWS Well-Architected Framework.
3. Conduct an architectural review using the AWS Well-Architected Tool.
4. Save a workload milestone to track architectural improvements over time.

---

Architecture Overview

The following diagrams illustrate the conceptual structure of the framework and the workflow we will perform in the AWS Well-Architected Tool.

The 6 Pillars of the Framework

Lab Workflow

---

Step-by-Step Instructions

Step 1: Create a New Workload

First, we need to create a workload profile in the AWS Well-Architected Tool. This profile represents the application or infrastructure you are assessing.

[!TIP] Notice the --lenses parameter. You can apply multiple lenses (like Serverless, SaaS, or FTR) to a single workload. Here, we are using the default foundational framework.

▶Console alternative

1. Log in to the AWS Management Console.
2. Navigate to AWS Well-Architected Tool.
3. Click Define workload.
4. Enter the Name, Description, and Review owner.
5. Select Production for the Environment.
6. Click Next, select the AWS Well-Architected Framework lens, and click Define workload.

📸 Screenshot: The "Define workload" form filled out with lab details.

Step 2: Retrieve Your Workload ID

To interact with your newly created workload via the CLI, you need its unique WorkloadId.

Look through the JSON output and copy the WorkloadId for brainybee-lab-workload. Keep this handy for the next steps, replacing <YOUR_WORKLOAD_ID> where necessary.

▶Console alternative

1. In the Well-Architected Tool dashboard, click on Workloads in the left navigation pane.
2. Click on brainybee-lab-workload.
3. The Workload ID is displayed at the top of the Properties tab.

Step 3: Answer a Pillar Question (Security)

Now, let's simulate updating an answer during our architectural review. We will address the first Security pillar question regarding secure account access.

▶Console alternative

1. Open your workload in the console and click Continue reviewing.
2. Expand the Security pillar and select the first question: How do you securely operate your workload?
3. Check the box for None of these.
4. In the Notes box, type: "Currently relying on default IAM settings. Need to implement MFA."
5. Click Save and exit.

Step 4: Create a Baseline Milestone

A milestone is a snapshot of your workload's current state. It is crucial for tracking how your architecture evolves and improves over time.

▶Console alternative

1. Navigate to the detail page of brainybee-lab-workload.
2. Click the Save milestone button in the upper right corner.
3. Enter BaselineReview as the milestone name.
4. Click Save.

---

Checkpoints

To verify that you have successfully completed the steps above, run the following verification command:

Verify Milestone Creation

Expected Result: You should see a JSON array returning your newly created milestone:

---

Teardown

[!WARNING] Remember to run the teardown commands to maintain a clean environment, even though the Well-Architected Tool does not incur hourly charges.

To delete the workload and all associated reviews and milestones, execute the following command:

▶Console alternative

1. Navigate to Workloads in the Well-Architected Tool.
2. Select the radio button next to brainybee-lab-workload.
3. Click the Delete button at the top.
4. Confirm the deletion by typing the workload name in the prompt.

---

Troubleshooting

Encountering issues? Review this table of common errors and their solutions: