
A cloud architecture review should answer three questions with evidence from the live environment: What differs from the intended design? What can an external or unintended principal reach? Where is the architecture spending money without creating enough value? The output is not a polished diagram. It is a prioritized set of findings, owners, and next actions tied to the AWS resources that are actually running.