External Resources

A curated map of the authoritative, primary sources behind the frameworks in this playbook. The guides teach the working shape of each practice; these links are where you go to verify the detail, cite the standard, or go deeper. Each in-guide page also carries its own 📚 Further reading section — this page is the aggregated index.

These are external, third-party resources. They change over time; treat the playbook's summaries as the durable part and these as the living source of truth.

Architecture & well-architected

• AWS Well-Architected Framework — the six-pillar model
• AWS Well-Architected Tool — run and track a structured review
• Azure Well-Architected Framework — pillars plus assessment checklists
• Google Cloud Architecture Framework — cross-pillar guidance
• AWS Architecture Center · Azure Architecture Center · Google Cloud Architecture Center — reference designs
• adr.github.io · MADR — architecture decision records
• CNCF Cloud Native Landscape — the cloud-native building blocks

Architecture patterns

• microservices.io — Chris Richardson's pattern catalog
• Microservices — Fowler & Lewis · MonolithFirst
• The Twelve-Factor App — baseline service properties
• Event-Driven — Fowler · Event Sourcing · Saga pattern
• Apache Kafka docs · AWS Event-Driven Architecture
• Data Mesh Principles — Dehghani · Data Mesh Learning
• API Gateway pattern · Backends for Frontends · Envoy Proxy

CI/CD & delivery

• DORA (DevOps Research & Assessment) — the four key delivery metrics
• Google Cloud DevOps / DORA capabilities
• Continuous Integration — Fowler · continuousdelivery.com
• BlueGreenDeployment · CanaryRelease · Feature Toggles
• OpenGitOps · Argo CD · Argo Rollouts

Supply-chain & pipeline security

• SLSA — supply-chain levels for software artifacts
• OWASP Top 10 CI/CD Security Risks
• NIST SSDF (SP 800-218) — secure software development framework
• CISA — SBOM · Sigstore · OpenSSF Scorecard

Security architecture

• OWASP ASVS · OWASP Top 10
• NIST Cybersecurity Framework · NIST Zero Trust (SP 800-207)
• CIS Controls · CIS Benchmarks

Compliance & regulation

• HHS — HIPAA Security Rule
• FedRAMP · NIST SP 800-53
• PCI Security Standards Council
• GDPR — full text (EUR-Lex) · EU Standard Contractual Clauses
• AICPA — SOC 2

Migration

• AWS — 6 Strategies for Migrating (the 6 R's)
• AWS Migration Hub · AWS Prescriptive Guidance
• Azure Cloud Adoption Framework · Google Cloud Migration Center
• StranglerFigApplication — Fowler

Cost & FinOps

• FinOps Foundation — Framework
• AWS Pricing Calculator · Azure Pricing Calculator · Google Cloud Pricing Calculator
• AWS Well-Architected — Cost Optimization Pillar

Reliability & risk

• Google SRE Books — SLOs, error budgets, release engineering
• NIST Risk Management Framework · NIST SP 800-30
• ISO 31000 — Risk Management
• AWS Well-Architected — Reliability Pillar

🔗 Related in this playbook

• Content Index — the full internal inventory
• Learning Paths — structured skill-building sequences
• Visual Diagrams — whiteboard-ready diagrams