CloudArch Pro · A VigilesHQ consulting initiative

Cloud Architecture and FinOps for Production Platforms

CloudArch Pro helps engineering and FinOps teams design production cloud platforms, review architecture decisions and control infrastructure cost. The technical library covers landing zones, networking, identity, reliability, migration, FinOps and AI infrastructure.

Browse cloud architecture guides Discuss a cloud requirement

Independent resource. Not affiliated with AWS, Azure, Google Cloud or Alibaba Cloud.

cost-explorer.sh

# AWS Cost Explorer filter for yesterday's unallocated spend
# Documented: https://docs.aws.amazon.com/cost-management/latest/userguide/ce-filtering.html
# Last verified: 2026-08-30

aws ce get-cost-and-usage \
  --time-period Start=2026-08-29,End=2026-08-30 \
  --granularity DAILY \
  --metrics UnblendedCost \
  --group-by Type=DIMENSION,Key=SERVICE \
  --filter file://untagged.json

# Expected: service totals. A NAT Gateway or Data Transfer
# line that was not in last week's baseline is the first lead.

Start with these pages

For architects, platform engineers and FinOps teams operating production systems on AWS, Azure, Google Cloud or Alibaba Cloud.

Guide
Designing a production landing zone

Account structure, identity, networking and logging that a production platform actually needs.
Guide
Finding unexpected cloud cost increases

How to isolate a spend spike by service, account and usage type before you change architecture.
Runbook
Unexpected cloud cost spike

Runbook: symptoms, provider consoles, safe mitigation and what not to delete.
Compare
AWS vs Azure vs Google Cloud vs Alibaba Cloud for APAC

Region presence, identity models and networking primitives that differ in APAC.
Tool
Egress cost estimator

Formula-based estimate for inter-AZ, inter-region and internet egress. Not an invoice.

Guide topics

Landing zones, networking, identity, Kubernetes cost, reliability, migration, FinOps, AI infrastructure and APAC region design.

Topic
Cloud architecture

Landing-zone decisions, account structure and production topology.
Topic
Landing zones

Baseline environments, guardrails and account vending.
Topic
Networking

Hub-and-spoke, private endpoints, DNS and egress paths.
Topic
Identity and security

IAM, workload identity and cross-cloud trust.
Topic
Kubernetes and containers

Cluster layout and Kubernetes cost allocation.
Topic
Serverless

When functions replace long-running compute, and when they do not.
Topic
Reliability and disaster recovery

Failure domains, RTO/RPO and cross-region failover.
Topic
Cloud migration

Readiness assessment, dependency mapping and cutover planning.
Topic
FinOps and cost optimization

Tagging, allocation, anomaly detection and commitments.
Topic
AI infrastructure

GPU capacity, idle waste and inference unit cost.
Topic
Multi-cloud operations

Identity, networking and operations across providers.
Topic
APAC architecture

Region choice, data residency and Alibaba Cloud in APAC.

All cloud architecture guides Consulting services

Latest guides

APAC architecture
Alibaba Cloud architecture for APAC workloads

Resource Directory, RAM, CEN and VPC design for APAC on Alibaba Cloud, including Singapore and China mainland regions.
Reliability and disaster recovery
Cross-region disaster recovery

How to pick RTO, RPO and failover mechanics across AWS, Azure and Google Cloud regions without treating a second AZ as DR.
Networking
Egress cost planning

How to estimate inter-AZ, inter-region and internet egress before the invoice, using native cost data and published meters.
AI infrastructure
GPU and AI workload cost governance

Unit cost for training and inference, idle GPU time, and how reservations differ from general compute FinOps.
Networking
Hub-and-spoke cloud networking

Transit Gateway, Azure hub-spoke, Shared VPC and when inspection and egress belong in the hub.