Cloud Network Architecture Review and Optimization
Review and optimize cloud networks for security, resilience, and cost-efficiency
What You Can Do
Systematically analyze your cloud network architecture across security, resilience, cost, and compliance dimensions. You receive a comprehensive assessment report with prioritized optimization recommendations, security hardening steps, and implementation guidance tailored to your infrastructure. The skill evaluates network design patterns, resource utilization, and compliance gaps to help you build cost-effective, secure, and highly available cloud networks.
Features
Evaluate network segmentation, firewall rules, VPN configurations, and access controls. Identify vulnerabilities and provide specific hardening recommendations including encryption protocols, DDoS mitigation strategies, and zero-trust architecture guidance.
Review availability zones, load balancing, and disaster recovery configurations. Assess single points of failure, redundancy levels, and failover mechanisms to ensure your network can withstand component failures.
Analyze bandwidth usage, NAT gateway costs, data transfer charges, and reserved capacity. Identify cost reduction opportunities through reserved instances, traffic routing optimization, and redundant resource elimination.
Map your network design against industry standards (HIPAA, PCI-DSS, SOC 2, GDPR, ISO 27001). Highlight compliance gaps and provide remediation steps for regulatory requirements specific to your industry.
Evaluate cross-region deployments, inter-region connectivity, and data residency requirements. Assess latency, failover timing, and compliance implications of your geographical architecture.
Interpret ASCII, JSON, or text descriptions of your network topology. Provide redline diagrams with suggested improvements and explain design trade-offs between competing optimization goals.
Analyze network flows, bandwidth allocation, and routing efficiency. Recommend changes to reduce latency, improve throughput, and optimize egress costs based on your traffic characteristics.
Example Output
Network Architecture Review Summary
Current State:
- Single-region deployment in us-east-1 with 3-AZ redundancy
- NAT gateway per AZ (monthly cost: ~$45)
- No cross-region failover
- Security groups allow unrestricted ingress on port 443
Security Findings:
- Missing VPC Flow Logs for compliance audit trail
- Database security group allows access from all application servers (not restrictive enough)
- SSL/TLS minimum version set to 1.0 (should be 1.2+)
Cost Reduction Opportunities:
- Consolidate to 1 NAT gateway with smart routing (save ~$30/month)
- Implement VPC endpoints for S3/DynamoDB (save ~$15/month on data transfer)
- Move infrequent backups to S3 intelligent-tiering (save ~$20/month)
Recommended Actions:
- Priority 1 (30 days): Update TLS version, enable VPC Flow Logs, add cross-AZ health checks
- Priority 2 (60 days): Implement VPC endpoints, consolidate NAT gateways
- Priority 3 (90 days): Plan multi-region failover in us-west-2
What's Included
- Comprehensive Architecture Assessment: Detailed evaluation of your current network design across security, resilience, cost, and compliance dimensions with visual findings summary.
- Prioritized Recommendations: Ranked list of optimization opportunities with estimated effort, timeline, and business impact (cost savings, security improvement, resilience gain).
- Security Hardening Checklist: Step-by-step guide to address security findings including firewall rule updates, encryption configuration, access control refinements, and monitoring setup.
- Cost Analysis Framework: Breakdown of network costs by component (NAT gateways, data transfer, VPN, DNS) with optimization strategies specific to your cloud provider.
- Implementation Roadmap: Phased execution plan with time estimates, dependencies, rollback procedures, and validation steps for each optimization initiative.
- Compliance Mapping Document: Table mapping your network controls to relevant compliance standards with gap analysis and remediation guidance.
Who It's For
- Cloud Architects
- Network Engineers
- DevOps and SRE Teams
- Security and Compliance Engineers
- Cloud Operations Managers
Best For
- Network redesigns and migrations
- Cost reduction and FinOps initiatives
- Security audits and hardening
- Compliance preparation and validation
- Disaster recovery and failover planning
You might also like
You get expert guidance on identifying and resolving electromagnetic compatibility issues in your designs. This skill helps you diagnose EMI sources, optimize shielding and grounding strategies, navigate regulatory requirements, and make data-driven design decisions that reduce testing cycles and ensure first-pass compliance.
You can upload or describe your network configuration and receive detailed analysis of performance bottlenecks, spectrum efficiency, and capacity constraints. The skill generates technical optimization reports with actionable recommendations for improving throughput, reducing latency, and enhancing coverage. You'll also get interference detection, signal quality assessments, and capacity planning guidance based on your specific deployment parameters.
You can submit your cloud infrastructure designs to receive expert validation against industry best practices, security standards, and cost optimization principles. The skill analyzes your architecture for scalability, resilience, and compliance gaps, then automatically generates comprehensive documentation including system diagrams, architecture decision records, and deployment guides tailored to your cloud platform.
Upload or paste antenna simulation results, and Claude analyzes electrical characteristics to identify performance bottlenecks and recommend targeted optimizations. You get actionable design changes for gain improvement, impedance matching, radiation pattern refinement, and bandwidth expansion. The skill interprets industry-standard formats and translates complex electromagnetic data into engineering insights.
Calculate complete microwave link budgets including transmit power, antenna gains, path losses, noise figures, and system margins. Analyze RF component performance specifications, verify atmospheric conditions, and predict link availability. Generate structured design documentation with verification checklists and performance recommendations.
This skill evaluates fiber splice quality by analyzing loss measurements, identifying splicing defects, and providing actionable troubleshooting steps. You can assess splices against industry standards like Telcordia and ITU-T, diagnose root causes of high loss, and generate professional quality reports for audits and certifications.
You can structure complex data center network designs from scratch by combining resilience frameworks, capacity models, and vendor comparison templates. You'll evaluate competing architectures based on cost, availability, latency, and scalability, then produce detailed decision documents that justify your design choices to stakeholders and engineering teams.
Design complete enterprise fiber optic networks with professional-grade topology planning, cable budgeting, and redundancy analysis. Get detailed equipment specifications, cost estimates, and implementation recommendations tailored to your site requirements. This skill handles everything from initial network layout through failover analysis, helping you create robust, scalable fiber infrastructure.