← Back to Dashboard
1. Reference Architecture Blueprint2. Launch Checklist and Day-2 Operations
Reference Architecture Blueprint
📚 Capstone: Production Bedrock Stack⏱ 12 min⭐ 130 XP
full Production Blueprint
The capstone assembles every module into one operable service. The objective is not just a working demo; it is an operable service - something an on-call engineer who didn't build it can run, debug, and safely change.
The Reference Architecture, Layer by Layer
[Client]
→ API Gateway: auth (Cognito/IAM) · rate limits · schema validation
→ Orchestrator (Lambda for sync API / ECS for long agent plans)
├─ Guardrails (input): content filters · denied topics · PII masking
├─ Knowledge Base: hybrid retrieval → rerank → top-5 cited chunks
├─ Router: task → model tier (Nova Lite ↕ Nova Pro/Claude escalation)
├─ Bedrock Runtime: Converse w/ pinned model ID + prompt v3.2
├─ Tools: schema-validated · idempotency keys · human gate on P1 actions
└─ Guardrails (output): grounding check · sensitive-info scan
→ Response + telemetry: {traceId, tokens, latency, guardrailAction, outcome}
Cross-cutting: PrivateLink endpoints · CMK encryption · CloudTrail
Delivery: manifest-versioned releases · eval gates in CI · canary + rollback
Resilience: cross-region profile · failover map · quota headroom in secondary
Component Checklist by Module
| Layer | Non-negotiables | Module |
|---|---|---|
| Security boundary | Auth, pinned-ARN IAM, PrivateLink, kill switch | 2, 16, 18 |
| Model strategy | Routing matrix, escalation tier, equivalence map | 11, 20 |
| RAG | Chunking fit, hybrid + rerank, citations, freshness sync | 6-7 |
| Safety | Guardrails both directions, regression suite in CI, human gates | 5, 17 |
| Quality | Golden/adversarial/regression sets, gates, online signals | 12, 19 |
| Operations | Trace correlation, SLOs, cost attribution, incident playbooks, runbooks | 13-15, 21-23 |
Grade Yourself Like an Auditor
- Can you answer "why did the system say X to user Y at time T?" from traces alone, within 10 minutes?
- Can you roll back the entire manifest (code + prompt + model + guardrail) in one step?
- Does a new safety false negative block deploy with zero override path?
- Does a region failover preserve guardrails, quality, and residency - and has it been drilled?
Capstone bar: four yeses. Anything less is a demo with production traffic - which is how AI incidents are born.
🧪 Knowledge Check
Press 1-4 to select1 of 2
A production Bedrock capstone must include:
Only prompt text
Security, evaluation, observability, and runbooks
Only UI
No fallback