Azure Well-Architected Review Assessment Updates
Microsoft is excited to announce a significant update to the Azure Well-Architected Review assessment. The updated Azure Well-Architected Review assessment helps you build and optimize workloads (see figure 1). It walks you through a series of questions about your workload, and, based on your responses, it generates tailored and prioritized recommendations to improve your workload design. The guidance is actionable and applicable to nearly every workload. The recommendations align with the latest best practices across the five key pillars of reliability, security, cost optimization, operational excellence, and performance efficiency.
Figure 1. The landing page for the Azure Well-Architected Review assessment.
Overview of the assessment updates
Every question, answer, and recommendation now feature the latest best practices in workload management across the five pillars. The assessment updates reflect the insights of experts around the world. After years of collaborating with customers, these experts provided targeted updates to reflect the most critical needs of customers in the current technical landscape.
In the Azure Well-Architected Review assessment, there are five different workload types to choose from. The updates discussed here apply to the Core Well-Architected Review option only (see figure 2).
Figure 2. The workload options in the Azure Well-Architected Review assessment. Discussed updates only apply to the Core Well-Architected Review.
The Core Well-Architected Review focuses follows the five pillars of the Azure Well-Achitected Framework guidance. Here’s a summary of the specific changes in each pillar of the Core-Well Architected Review:
- Reliability includes defining health states, recovery processes, and redundancy design. It offers insights into conducting disaster recovery drills and monitoring health states with alerts, helping to improve workload reliability.
- Security covers key topics such as securing high-impact accounts, firewall implementation, and distributed denial of service (DDoS) protection. It provides recommendations for maintaining up-to-date software and infrastructure, along with training in hardening techniques, to enhance the security posture of your Azure workload.
- Cost Optimization addresses strategies for optimizing licensing costs and managing financial expectations, including access control for spending. It offers guidance on workload cost estimation, aligning usage with billing increments, and resource consolidation to achieve cost efficiency.
- Operational Excellence focuses on safe deployment practices, workload responsibility, and infrastructure-as-code utilization. It emphasizes the importance of process documentation, standardized coding practices, and task automation to achieve operational consistency in Azure environments.
- Performance Efficiency involves evaluating performance requirements, analyzing testing results, and strategies for effective scaling. Recommendations cover designing scalable infrastructure and applications, and for ongoing performance optimization.
For any assessment, you can select one or all the pillars to work through. You receive the greatest benefit by addressing all the pillars, then starting new milestones to improve targeted areas (see figure 3).
Figure 3. The core pillar selection page.
Benefits of the assessment update
The assessment updates cover more aspects of your workload at a deeper technical level. It’s faster to complete than the previous version and is more broadly applicable to different types of workloads and environments. The assessment updates target universal workload design best practices, not just Azure configurations. This means you can run the assessment on almost any workload in any platform.
The updated assessment has 20+ more unique recommendations (375 total) than the previous version of the assessment, but it also has 124 fewer choices to work through. This means you get more tailored guidance with less input required. Even the wording of the assessment provides a better experience. There’s a consistent style and structure throughout that makes the assessment easier to understand and complete (see figure 4).
Figure 4. Example of the updated assessment style and structure consistency. Viewing the assessment question that aligns with SE:05 Identity and access management.
Together, these changes provide more nuanced guidance to improve your workload with less effort required to complete the assessment. It frees you to revisit the assessment more often.
As for the guidance you receive, it’s not only better, but it’s more cohesive with the Azure Well-Architected Framework. The recommendations take you to a page in Azure Well-Architected Framework with more detailed guidance. The priority for each recommendation has also been updated to reflect their priority today (see figure 5).
Figure 5. Sample of the recommended actions after completing an assessment.
Each recommendation starts with a code, such as “SE:05”. The code is an abbreviation for the pillar name it corresponds to and a number that indicates the specific articles in the Azure Well-Architected Framework it pulls from. For example, the code “SE:05” corresponds to the guidance on identity and access management in the Azure Well-Architected Framework (see figure 6).
Figure 6. The checklist from the Security pillar. It shows how the recommendation code aligns with the guidance in each pillar. The code in the Checklist table has corresponding guides in the table of contents on the left.
The codes for each pillar are “RE” for reliability, “SE” for security, “CO” for cost optimization, “OE” for operational excellence, and “PE” for performance efficiency. There are one or more articles in the framework associated with each code. Because a code corresponds to a broad topic, like Identity and access management, a single code precedes multiple assessment recommended actions.
Features the assessment updates didn’t change
Despite the comprehensive updates, the key functionalities of the assessment remain unchanged. You can still initiate new assessments, create milestones, and access the latest recommendations based on their responses. The to view all recommendations and export recommendations to a downloadable CSV (see figure 7).
Figure 7. The ability to export the recommendations for your workload to a CSV that you can download.
It will still integrate with Azure Advisor, and the ability to name assessments and milestones remains the same.
All new assessments and milestones will automatically revert to the new assessment updates. Your previous session responses will still be available, but prior responses won’t be applied to the new milestones to ensure alignment with the most current guidance.
Conclusion
In summary, the updated Azure Well-Architected Review assessment reflects a move towards a more detailed, nuanced approach across all pillars. These improvements demonstrate Microsoft's commitment to helping customers build and maintain efficient, secure, and resilient cloud architectures.
To learn more about the WAF refresh, see the new hub page for the Well-Architected Framework: aka.ms/waf;
or Uli Homann's blog post: https://aka.ms/whatsnewinwaf
Dom Allen has also created a great, 6-minute video on the Azure Enablement Show.