← Back to Dashboard
1. Reference Architecture Blueprint2. Launch Checklist and Day-2 Operations

Reference Architecture Blueprint

📚 Capstone: Production Bedrock Stack12 min130 XP

full Production Blueprint

The capstone assembles every module into one operable service. The objective is not just a working demo; it is an operable service - something an on-call engineer who didn't build it can run, debug, and safely change.

The Reference Architecture, Layer by Layer

[Client]
  → API Gateway: auth (Cognito/IAM) · rate limits · schema validation
  → Orchestrator (Lambda for sync API / ECS for long agent plans)
      ├─ Guardrails (input): content filters · denied topics · PII masking
      ├─ Knowledge Base: hybrid retrieval → rerank → top-5 cited chunks
      ├─ Router: task → model tier (Nova Lite ↕ Nova Pro/Claude escalation)
      ├─ Bedrock Runtime: Converse w/ pinned model ID + prompt v3.2
      ├─ Tools: schema-validated · idempotency keys · human gate on P1 actions
      └─ Guardrails (output): grounding check · sensitive-info scan
  → Response + telemetry: {traceId, tokens, latency, guardrailAction, outcome}

Cross-cutting: PrivateLink endpoints · CMK encryption · CloudTrail
Delivery:      manifest-versioned releases · eval gates in CI · canary + rollback
Resilience:    cross-region profile · failover map · quota headroom in secondary

Component Checklist by Module

LayerNon-negotiablesModule
Security boundaryAuth, pinned-ARN IAM, PrivateLink, kill switch2, 16, 18
Model strategyRouting matrix, escalation tier, equivalence map11, 20
RAGChunking fit, hybrid + rerank, citations, freshness sync6-7
SafetyGuardrails both directions, regression suite in CI, human gates5, 17
QualityGolden/adversarial/regression sets, gates, online signals12, 19
OperationsTrace correlation, SLOs, cost attribution, incident playbooks, runbooks13-15, 21-23

Grade Yourself Like an Auditor

  • Can you answer "why did the system say X to user Y at time T?" from traces alone, within 10 minutes?
  • Can you roll back the entire manifest (code + prompt + model + guardrail) in one step?
  • Does a new safety false negative block deploy with zero override path?
  • Does a region failover preserve guardrails, quality, and residency - and has it been drilled?
Capstone bar: four yeses. Anything less is a demo with production traffic - which is how AI incidents are born.
🧪 Knowledge Check
Press 1-4 to select1 of 2
A production Bedrock capstone must include:
Only prompt text
Security, evaluation, observability, and runbooks
Only UI
No fallback