The Amazon EKS platform architect role
Amazon Elastic Kubernetes Service (Amazon EKS) is AWS-managed Kubernetes. An EKS platform architect turns business needs into a safe, reliable container platform that development teams can actually use.
Explain it like I am five
Imagine an application is a busy restaurant. Containers are lunch boxes holding one small part of the meal. Kubernetes is the restaurant manager: it places the boxes, replaces broken ones, and opens more serving lines when a crowd arrives. EKS means AWS runs the manager's control room. You still decide who enters, where the boxes run, how they communicate, and what happens during a fire.
The architect's loop
- Ask about users, business outcomes, data, scale, security, recovery, and cost.
- Decide whether Kubernetes is justified; sometimes ECS, Lambda, or App Runner is simpler.
- Choose the responsibility boundary: Auto Mode, managed node groups, Fargate, or self-managed capacity.
- Design accounts, identity, networks, workloads, data, delivery, and operations.
- Record trade-offs and rejected alternatives.
- Prove the design with load tests, failure drills, restore tests, and cost data.
Evidence a strong architect produces
- A context and traffic-flow diagram.
- A compute-mode decision with reasons.
- IAM, EKS access entry, Kubernetes RBAC, and Pod Identity design.
- VPC, subnet, IP-capacity, endpoint, and network-policy plan.
- Resource, autoscaling, disruption, and topology policy.
- Source-to-ECR-to-admission supply-chain controls.
- SLOs, dashboards, alerts, runbooks, and an upgrade calendar.
- Tested RTO, RPO, backup, and regional recovery.
- Unit cost such as cost per order—not only a monthly invoice.
Feynman check
Can you explain who manages the control plane, who manages worker capacity, and who secures the application without saying “AWS handles everything”? If yes, you understand the first responsibility boundary.