---
title: "The Amazon EKS platform architect role"
chapter: "00"
---

# The Amazon EKS platform architect role

Amazon Elastic Kubernetes Service (Amazon EKS) is AWS-managed Kubernetes. An
EKS platform architect turns business needs into a safe, reliable container
platform that development teams can actually use.

## Explain it like I am five

Imagine an application is a busy restaurant. Containers are lunch boxes holding
one small part of the meal. Kubernetes is the restaurant manager: it places the
boxes, replaces broken ones, and opens more serving lines when a crowd arrives.
EKS means AWS runs the manager's control room. You still decide who enters,
where the boxes run, how they communicate, and what happens during a fire.

## The architect's loop

1. Ask about users, business outcomes, data, scale, security, recovery, and cost.
2. Decide whether Kubernetes is justified; sometimes ECS, Lambda, or App Runner
   is simpler.
3. Choose the responsibility boundary: Auto Mode, managed node groups, Fargate,
   or self-managed capacity.
4. Design accounts, identity, networks, workloads, data, delivery, and operations.
5. Record trade-offs and rejected alternatives.
6. Prove the design with load tests, failure drills, restore tests, and cost data.

## Evidence a strong architect produces

- A context and traffic-flow diagram.
- A compute-mode decision with reasons.
- IAM, EKS access entry, Kubernetes RBAC, and Pod Identity design.
- VPC, subnet, IP-capacity, endpoint, and network-policy plan.
- Resource, autoscaling, disruption, and topology policy.
- Source-to-ECR-to-admission supply-chain controls.
- SLOs, dashboards, alerts, runbooks, and an upgrade calendar.
- Tested RTO, RPO, backup, and regional recovery.
- Unit cost such as cost per order—not only a monthly invoice.

## Feynman check

Can you explain who manages the control plane, who manages worker capacity, and
who secures the application without saying “AWS handles everything”? If yes,
you understand the first responsibility boundary.