Markdown Editor

Solution Architecture Health Check Template

13 scored dimensions, weighted health index, ISO 25010 NFR drift, lifecycle and EOL, debt, cost trend, AWS, Azure and Google pillar mapping, actions, trend

आर्किटेक्चरपूर्णAWS, Azure and Google Cloud Well-Architected pillars (mapping); ISO/IEC 25010:2023healthcheck
एडिटर में खोलें.md डाउनलोड करें

उपयोग कैसे करें: Use it on a fixed cadence (often yearly) or before a major investment or contract renewal for a solution already in production. Fill the scope, scoring scale and weights first and keep them between checks, then score each dimension from evidence. The main pitfall is reporting the index alone, which hides one dimension collapsing while others improve.

प्रीव्यू

Solution Architecture Health Check: [Solution name]

Periodic health check of one solution in production, across every architecture dimension: fit with the business drivers it was built for, quality attribute and NFR drift, reliability, security, cost and sustainability, performance and capacity, operability, technology lifecycle, technical debt, data, documentation and team ownership. Each dimension gets an evidence-based score, the scores roll up into a weighted index and a trend, and the findings become a prioritised action list. Provider-neutral, with a mapping to the pillars of the AWS Well-Architected Framework (6 pillars), the Azure Well-Architected Framework (5 pillars) and the Google Cloud Well-Architected Framework (6 pillars), and quality characteristics named as in ISO/IEC 25010:2023. Replace every [bracketed] value and every row marked Example.

Document control

FieldValue
Document ID[AHC-SOLUTION-YYYY]
Solution[Solution name, service ID in the CMDB]
Service owner[@service-owner]
Check number[n, e.g. 2nd annual check]
Previous check[AHC-SOLUTION-YYYY, date]
Check periodYYYY-MM-DD to YYYY-MM-DD
Version[0.1]
Status[Draft / In review / Approved]
Owner (lead reviewer)[@lead-reviewer]
Approvers / reviewers[Service owner, domain architect, security architect, FinOps lead]
Hosting[Provider and region, or on-premises site]
Classification[Internal / Confidential]
Last updatedYYYY-MM-DD

Approvals

RoleNameDecisionConditionsDate
Lead reviewer[@lead-reviewer][Submitted][None]YYYY-MM-DD
Service owner[@service-owner][Accepts findings and actions][Conditions]YYYY-MM-DD
Domain architect[@architect][Agreed][Conditions]YYYY-MM-DD
Security architect[@security][Agreed][Conditions]YYYY-MM-DD

Revision history

VersionDateAuthorChange summary
0.1YYYY-MM-DD[@name]Scope, inputs requested, previous scores copied for comparison
0.5YYYY-MM-DD[@name]Example: Evidence reviewed in a two-hour session with the service team; scores drafted
1.0YYYY-MM-DD[@name]Example: Accepted by service owner; actions HC-ACT-01 to HC-ACT-08 opened

Contents

1. Health summary

ItemResult
Health index (0 to 100)Example: 62.5 (previous check 62.5)
Overall statusExample: Amber
Red dimensions (score 0 or 1)Example: D8 Technology lifecycle
Improved since last checkExample: D3 Reliability, D6 Operability
Declined since last checkExample: D7 Performance and capacity, D8 Technology lifecycle, D11 Documentation
FindingsExample: 9 (2 high, 4 medium, 3 low)
Top actionsExample: HC-ACT-01 database engine upgrade; HC-ACT-02 capacity plan for API growth; HC-ACT-03 retire CRM export
Decision requested[Fund HC-ACT-01 in the next quarter; accept the remaining actions]

Example narrative: The hub still serves its purpose and its reliability has improved since the dead-letter runbook and certificate automation landed. The index is flat because three dimensions declined by as much as two improved: the database engine version leaves vendor support in two months, and API traffic has grown to 92% of design capacity. Both are predictable and fixable this quarter.

2. Scope, cadence and method

2.1 Scope

ItemIn scopeOut of scope
ComponentsExample: Hub store, matching service, customer API, event publication, stewardship user interfaceConsuming systems
EnvironmentsExample: Production; disaster recovery region; pre-production for release process onlyDeveloper sandboxes
Shared platformsExample: Used as delivered; only their effect on this solution is checkedPlatform internals (own checks)

2.2 Cadence and triggers

TriggerCheck type
Fixed cadence: Example: every 12 months from the first PIRFull check, all dimensions
Before a contract renewal, major investment or re-platform decisionFull check
After a P1 incident with architectural causeTargeted check on the affected dimensions
When a dependency reaches end of support within [6] monthsTargeted check on D8
A dimension scored 0 or 1 at the last checkFollow-up on that dimension after [3] months

2.3 Inputs

InputSource
Original drivers, KPIs and NFRsArchitecture vision, quality attribute record, Architecture Contract
Service data for the periodMonitoring, incident and problem records, SLO reports
Cost dataCloud billing and FinOps reports, licence and support invoices
Inventory and versionsConfiguration management database, software bill of materials, infrastructure as code
Security dataVulnerability scans, access reviews, penetration test, risk register
Previous checks and reviewsPrevious health check, PIR, provider review results, compliance assessments
Team viewA structured session with the service team, [60 to 120] minutes

2.4 Scoring scale

This scale is original to this template.

ScoreLabelMeaning
4StrongMeets or exceeds expectations with evidence; improving practices in place
3AdequateMeets expectations with evidence; minor gaps only
2WeakNoticeable gaps; risk is growing but not yet urgent
1PoorSerious gaps, or claims without evidence; action needed this quarter
0CriticalImmediate risk to the service, its data or compliance

2.5 Weights and roll-up

Set weights once per solution class and keep them between checks. The health index is the weighted sum of scores divided by the maximum possible weighted sum, times 100.

DimensionWeight (Example)
D1 Business fit10
D2 Quality attributes and NFRs10
D3 Reliability and resilience10
D4 Security15
D5 Cost10
D6 Operability10
D7 Performance and capacity5
D8 Technology lifecycle10
D9 Technical debt5
D10 Data health5
D11 Documentation and decisions5
D12 Team and ownership3
D13 Sustainability2
Total100

Sections 3 to 14 hold the evidence for each dimension, and section numbers do not follow dimension numbers: D1 in section 3, D2 in 4, D3 in 5, D4 in 6, D5 and D13 in 7, D7 in 8, D6 in 9, D8 in 10, D9 in 11, D10 in 12, D11 in 13 and D12 in 14. Cite findings by dimension ID, not by section number.

Status rules: Example: green when the index is at least 75 and no dimension scores below 2; red when the index is below 50 or any dimension scores 0; amber otherwise. Each dimension also carries its own status: 3 or 4 green, 2 amber, 0 or 1 red. Any red dimension is reported in section 1 whatever the index.

3. Solution context and original drivers

Driver or goalOriginal targetStill valid?Current evidenceNote
BG-02 (Example) One trusted view of the customerGolden ID for 98% of customersYes98.3% at month 24Reached after policy system C cleansing
BG-03 (Example) Lower cost to serveSteward correction hours below 150 per monthYes120 per month
Example: Customer data for all channels5 consuming systemsChanged: now 8 planned, incl. two AI assistants6 liveLoad growth drives D7
[Driver][Target][Yes / Changed / No][Evidence][Note]

D1 Business fit score: Example: 3. Drivers hold and targets are met; new consumers were not foreseen in the design and need capacity work.

4. Quality attributes and NFR drift

Characteristic (ISO/IEC 25010:2023)RequirementTargetEvidence this periodDriftNote
Performance efficiency (Example)NFR-PERF-01 API latency p95At most 300 ms285 ms, rising from 240 msToward limitLoad growth
Reliability (Example)Customer API availability99.9% per month99.95% average; no month below targetImproved
Security (Example)NFR-SEC-01 personal data past retention0 records0 in all auditsNone
Compatibility (Example)Event schema backward compatibleNo breaking change without a new versionOne breaking change shipped as minor versionDriftFND-HC-06
Maintainability (Example)Lead time for a matching rule changeUnder 5 days9 days medianDriftSingle expert (D12)
Flexibility (Example)Scale out without code changeHorizontal scaling by configurationConfirmed in load testNone
Interaction capability (Example)Steward task completion without help95%96%None
Functional suitability (Example)Match decisions correct on audit sampleAt least 99%99.2%None
Safety (Example)Not significant for this solutionNot applicableNot applicableNot applicableNo physical effect
[Characteristic][Requirement ID][Target][Evidence][None / Toward limit / Drift / Improved][Note]

D2 Quality attributes score: Example: 3. Most targets met; two drifts with known causes. Record target changes in the quality attribute record (requirements/quality-attributes).

5. Reliability and resilience

CheckEvidenceResult
Recovery test in the period, against RTO and RPOExample: Regional failover test YYYY-MM-DD: RTO 2 h 10 min against 4 h; RPO 9 min against 15 minMet
Backup restore testExample: Quarterly restore of a full snapshot; last one YYYY-MM-DDMet
P1 and P2 incidents with architectural causeExample: 0 P1, 2 P2 (both consumer-side retries)Acceptable
Known single points of failureExample: Matching rule deployment needs one named engineer (see D12)Open
Dependency failure handlingExample: Circuit breakers on policy system calls; tested in a game dayMet
[Check][Evidence][Result]

D3 Reliability and resilience score: Example: 3 (previous 2). Improved after automated certificate renewal and the tested dead-letter runbook. Use the DR plan (ops/disaster-recovery-plan) and game days (ops/game-day-plan) for detail.

6. Security posture

CheckEvidenceResult
Threat model updated for changes in the periodExample: Updated for the two AI assistant consumers YYYY-MM-DDMet
Vulnerabilities past remediation targetExample: 0 critical, 2 high past 30 days (both in the ageing database engine)Gap
Access reviews completed and leavers removed on timeExample: 4 of 4 quarterly reviews; leaver removal within 1 day since automationMet
Secrets and keys rotated as scheduledExample: Yes, through the key serviceMet
Penetration test in the last 12 monthsExample: YYYY-MM-DD; 1 medium finding fixedMet
Accepted risks reviewed by their due dateExample: All reviewedMet
[Check][Evidence][Result]

D4 Security score: Example: 3. Controls operate; the two high vulnerabilities are tied to the lifecycle finding in D8. Detail lives in the security architecture (security/security-architecture) and threat model (security/threat-model).

7. Cost and sustainability

7.1 Cost

MeasurePrevious checkThis checkTrendNote
Annual run cost (USD) (Example)214,000236,000+10.3%Traffic up 45%
Cost per 1,000 API calls (USD) (Example)0.460.35Down 24%Micro-batch matching (decision ADR-027)
Idle or unattached resources (USD per year) (Example)9,00014,000UpUnused pre-production replicas
Commitment coverage (Example)40%40%FlatRenewal due; reconsider level
[Measure][Value][Value][Trend][Note]

D5 Cost score: Example: 2. Unit cost improved, but idle resources grew and commitments were not reviewed. Use the FinOps review (ops/finops-cost-review) for the full analysis.

7.2 Sustainability

MeasureThis checkNote
Provider carbon or emissions report available for this workload (Example)Yes, monthlyLocation-based figures only
Non-production environments scheduled off outside working hours (Example)PartlyPre-production runs all week
Data stored past its business need (Example)None foundRetention enforced (D10)
[Measure][Value][Note]

D13 Sustainability score: Example: 2. For a fuller assessment use the sustainability architecture assessment (architecture/sustainability-architecture-assessment).

8. Performance and capacity

MeasureDesign capacityPrevious checkThis checkForecast in 12 monthsHeadroom now
Peak API requests per second (Example)4003103684508%
Events per hour at peak (Example)500,000180,000260,000340,00048%
Hub storage (TB) (Example)4.01.62.12.648%
[Measure][Capacity][Value][Value][Forecast][%]

Headroom is (design capacity minus current peak) divided by design capacity: Example: API (400 minus 368) divided by 400 equals 8%.

D7 Performance and capacity score: Example: 2 (previous 3). The API will exceed its design capacity within the year at the current growth. Update the capacity plan (ops/capacity-plan).

9. Operability

CheckEvidenceResult
Runbooks current for every alert that pagesExample: 22 of 23; one new alert lacks a runbookMinor gap
Alert noiseExample: 6% of pages were not actionable (previous 18%)Improved
Change failure rateExample: 7%Met
Deployment frequency and lead timeExample: Weekly; 2 days from merge to productionMet
Toil (manual recurring work)Example: 6 hours per week, down from 14Improved
SLO reporting to the service ownerExample: Monthly, automatedMet
[Check][Evidence][Result]

D6 Operability score: Example: 3 (previous 2). See the observability spec (ops/observability-spec) and runbook (dev/runbook).

10. Technology lifecycle and dependencies

ComponentTypeVersion in productionLatest supportedSupport endsStatusAction
Example: Relational database engineManaged service[major.minor][major.minor]YYYY-MM-DD (in 2 months)RedHC-ACT-01
Example: Application runtimeRuntime[version][version]YYYY-MM-DD (in 10 months)AmberPlan upgrade
Example: Matching libraryLibrary[version][version]Vendor supportedGreenNone
Example: Container base imageImage[tag][tag]Rebuilt weeklyGreenNone
Example: Stewardship UI frameworkLibrary[version][version]YYYY-MM-DD (passed)RedHC-ACT-04
[Component][Type][Version][Version]YYYY-MM-DD[Green / Amber / Red][Action]

Status rule: Example: red when support ends within [3] months or has passed, amber within [12] months, green otherwise. Keep the inventory in the software bill of materials (security/supply-chain-security) and check the radar status of each product (architecture/tech-radar).

D8 Technology lifecycle score: Example: 1 (previous 2). The database upgrade flagged at design review was deferred twice.

11. Technical debt and architecture erosion

ItemPrevious checkThis checkNote
Open debt items for this solution (Example)54TD-032 (replica read) closed
Total estimated interest, hours per month (Example)4638
Active dispensations (Example)1 (DSP-2026-09)1, renewed once and then extended by executive decisionCRM export; expires in 3 months; the executive has said it will not renew again
Undocumented interfaces found (Example)10
Components or flows not in the approved models (Example)21Ad hoc export script for audit
[Item][Value][Value][Note]

D9 Technical debt score: Example: 2. Debt falls, but the CRM dispensation has been renewed once by the board and once by the executive (charter section 8.1), and the executive has said it will not renew it again. See the tech debt register (architecture/tech-debt-register) and fitness functions (architecture/fitness-functions).

12. Data health

CheckEvidenceResult
Data quality rules and scores for mastered entitiesExample: 34 rules; 98.3% golden ID coverage; duplicate rate 1.1%Met
Owners and stewards named and activeExample: All entities; one steward vacancyMinor gap
Retention and deletion enforcedExample: Monthly job; 0 overdue recordsMet
Lineage complete from sourcesExample: All three sources recordedMet
Data shared with new consumers under an agreed purposeExample: AI assistants use a minimised view under DPIA updateMet
[Check][Evidence][Result]

D10 Data health score: Example: 3. See the data dictionary (architecture/data-dictionary).

13. Documentation and decision currency

RecordLast updatedMatches production?Note
Solution design and as-built models (Example)14 months agoNoAI assistant consumers missing
Decision records (Example)Last ADR 3 months agoYes4 new ADRs this period
Interface specifications (Example)CurrentPartlyEvent schema change not versioned (FND-HC-06)
Runbooks (Example)CurrentYes, except oneSee D6
Architecture repository entry (Example)14 months agoNoUpdate with models
[Record][Date][Yes / Partly / No][Note]

D11 Documentation and decisions score: Example: 2 (previous 3). Use the decision log (architecture/architecture-decision-log) and C4 models (architecture/c4-architecture) to bring records up to date.

14. Team, ownership and skills

CheckEvidenceResult
Named service owner and product ownerExample: Both named and activeMet
People able to change matching rulesExample: 1 (target 2)Gap
People able to run a regional failoverExample: 4Met
Funded roadmap for the next 12 monthsExample: Yes, including capacity workMet
Supplier knowledge dependencyExample: Matching library support by supplier; contract renews in 8 monthsWatch
[Check][Evidence][Result]

D12 Team and ownership score: Example: 2.

15. Scorecard and framework mapping

15.1 Scorecard

DimensionWeightPrevious scoreScoreWeighted scoreStatus
D1 Business fit (Example)103330Green
D2 Quality attributes and NFRs (Example)103330Green
D3 Reliability and resilience (Example)102330Green
D4 Security (Example)153345Green
D5 Cost (Example)102220Amber
D6 Operability (Example)102330Green
D7 Performance and capacity (Example)53210Amber
D8 Technology lifecycle (Example)102110Red
D9 Technical debt (Example)52210Amber
D10 Data health (Example)53315Green
D11 Documentation and decisions (Example)53210Amber
D12 Team and ownership (Example)3226Amber
D13 Sustainability (Example)2224Amber
Total100250

Arithmetic: maximum weighted sum is 100 times 4, which is 400. Health index equals 250 divided by 400, times 100, which is 62.5. The previous scores column, with the same weights, also sums to 250, so the previous index was also 62.5. Status: amber, because the index is between 50 and 75 and D8 scores 1.

15.2 Mapping to provider frameworks

DimensionAWS Well-Architected pillarAzure Well-Architected pillarGoogle Cloud Well-Architected pillar
D3 Reliability and resilienceReliabilityReliabilityReliability
D4 SecuritySecuritySecuritySecurity, privacy, and compliance
D5 CostCost optimizationCost OptimizationCost optimization
D6 OperabilityOperational excellenceOperational ExcellenceOperational excellence
D7 Performance and capacityPerformance efficiencyPerformance EfficiencyPerformance optimization
D13 SustainabilitySustainabilityNo pillar: sustainability workload guidanceSustainability
D1, D2, D8 to D12No direct pillar; partly covered across pillarsNo direct pillarNo direct pillar

Where a provider review was run in the period, enter its high-risk count next to the matching dimension and explain any difference in score.

16. Findings and prioritised actions

16.1 Findings

Finding IDDimensionSeverityFindingAction
FND-HC-01 (Example)D8HighDatabase engine leaves vendor support in 2 months; upgrade deferred twiceHC-ACT-01
FND-HC-02 (Example)D7HighAPI at 92% of design capacity; forecast exceeds it within 12 monthsHC-ACT-02
FND-HC-03 (Example)D9MediumCRM export dispensation expires in 3 months; the executive will not renew it againHC-ACT-03
FND-HC-04 (Example)D8MediumStewardship UI framework past end of supportHC-ACT-04
FND-HC-05 (Example)D12MediumOne person can change matching rulesHC-ACT-05
FND-HC-06 (Example)D2, D11MediumBreaking event schema change released as a minor versionHC-ACT-06
FND-HC-07 (Example)D5LowIdle pre-production replicas cost about USD 14,000 a yearHC-ACT-07
FND-HC-08 (Example)D11LowAs-built models 14 months oldHC-ACT-08
FND-HC-09 (Example)D6LowOne paging alert without a runbookHC-ACT-08
[FND-HC-nn][Dn][High / Medium / Low][Finding][HC-ACT-nn]

16.2 Action plan

Action IDActionOwnerDueEffortStatus
HC-ACT-01 (Example)Upgrade the database engine to a supported version, with rehearsal in pre-production[@platform-lead]YYYY-MM-DD (before support ends)[n] person-weeksOpen
HC-ACT-02 (Example)Revise the capacity plan and scale the API tier; add a headroom alert at 75%[@sre-lead]YYYY-MM-DD[n] person-weeksOpen
HC-ACT-03 (Example)Present the CRM retirement decision to the board before the dispensation expires[@service-owner]YYYY-MM-DDDecisionOpen
HC-ACT-04 (Example)Upgrade the stewardship UI framework[@dev-lead]YYYY-MM-DD[n] person-weeksOpen
HC-ACT-05 (Example)Train a second engineer on matching rules and pair on the next two changes[@service-owner]YYYY-MM-DD[n] daysOpen
HC-ACT-06 (Example)Add a schema compatibility check to the pipeline[@integration-lead]YYYY-MM-DD[n] daysOpen
HC-ACT-07 (Example)Schedule pre-production replicas off outside test windows[@finops-lead]YYYY-MM-DD[n] daysOpen
HC-ACT-08 (Example)Refresh as-built models and write the missing runbook[@solution-architect]YYYY-MM-DD[n] daysOpen
[HC-ACT-nn][Action][@owner]YYYY-MM-DD[Effort][Open / Done]

Large or cross-team actions go to the architecture roadmap (architecture/architecture-roadmap-transition); changes that alter the approved architecture need a change request (architecture/architecture-change-request).

17. Trend and next check

CheckDateIndexRed dimensionsNote
PIR baseline (Example)YYYY-MM-DD55.0D9Scored retrospectively from the PIR evidence
Check 1 (Example)YYYY-MM-DD62.5None
Check 2 (Example)YYYY-MM-DD62.5D8This document
[Check n]YYYY-MM-DD[Index][Dn][Note]
ItemDecision
Next full checkExample: Month 36, YYYY-MM-DD
Follow-up checksExample: D8 and D7 at month 27, after HC-ACT-01 and HC-ACT-02
EscalationReport the red dimension and its action to the architecture board at its next meeting

18. Glossary and references

18.1 Glossary

TermMeaning in this document
Health checkA periodic, evidence-based scan of a running solution across all architecture dimensions
DimensionOne area of the solution scored on its own (D1 to D13)
Health indexWeighted sum of dimension scores as a percentage of the maximum
DriftMovement of an observed quality away from its target, or of the running system away from its approved design
ErosionGradual loss of architectural structure through shortcuts and unrecorded changes
HeadroomShare of design capacity still unused at current peak demand
End of supportDate after which the vendor or community stops issuing fixes for a version
PillarA top-level area of a cloud provider's well-architected framework
[Term][Meaning]

18.2 References

IDReferenceVersion / date
REF-01AWS Well-Architected Framework (whitepaper; six pillars)Publication date 2024-11-06, as listed on 2026-10-23
REF-02Azure Well-Architected Framework (five pillars, workload guides, assessment tool)Hub page updated 2026-09-11
REF-03Google Cloud Well-Architected Framework (six pillars, cross-pillar perspectives)Last updated 2026-10-13
REF-04ISO/IEC 25010:2023, Systems and software quality models: product quality modelEdition 2, 2023-11
REF-05Cloud Architecture Review (architecture/cloud-architecture-review)[x.y]
REF-06Post-Implementation Review (project/post-implementation-review)[x.y]
REF-07Quality attributes (requirements/quality-attributes)[x.y]
REF-08Tech debt register (architecture/tech-debt-register)[Date]

Standard and licence note

Structure aligned with the cloud provider well-architected frameworks and with ISO/IEC 25010:2023: the pillar names of the AWS Well-Architected Framework (operational excellence, security, reliability, performance efficiency, cost optimization, sustainability), the Azure Well-Architected Framework (Reliability, Security, Cost Optimization, Operational Excellence, Performance Efficiency) and the Google Cloud Well-Architected Framework (operational excellence; security, privacy, and compliance; reliability; cost optimization; performance optimization; sustainability) are used only to map results, and the nine quality characteristic names of ISO/IEC 25010:2023 are used as labels. The thirteen dimensions, the scoring scale, weights, checks, questions and all text are original; no questions, best practices or other text from the frameworks or the standard are reproduced. Obtain ISO/IEC 25010 from ISO for its full content. AWS, Azure and Google Cloud are trademarks of their owners; this template is not affiliated with or endorsed by them. Check the current framework versions at docs.aws.amazon.com, learn.microsoft.com and cloud.google.com. Template licence: MIT.

संबंधित टेम्पलेट