Prices
Estimated monthly on-demand costs for this workload architecture.
Workload Costs Comparison
Prices by provider and services that enable users to run this workload. Shape the architecture based on cloud best practices using the four Architecture Priorities below — Capacity, Performance, Reliability, and Security. Components and prices recompute as you adjust each priority (e.g. higher Security adds a WAF, KMS, and threat monitoring), and you can switch region or billing period to compare like-for-like.
How each price was matched
CloseMeets the requirement but over-provisioned — the smallest SKU this provider sells above the requested size is materially larger.ApproximateFalls short on vCPU or memory. The price is real but it buys less than the architecture asks for.No comparable SKUNothing in this provider's catalog is close enough to compare fairly. Excluded from the total — the column is not a like-for-like alternative for that line.Not offeredThe provider does not sell a product in this category at all.
Unbadged prices are exact matches. Hover any badge for the specific reason. Totals cover only the components a provider actually matched — the “N of M tracked” note under a total says how many.
Workload Configuration
Architecture Priorities
Select level (High / Medium / Low) to adjust requirementsDaily Visitors
Speed — instance class, storage media, caching
Redundancy — HA, replicas, backups, load balancing
Hardening — WAF, key management, threat detection
Volume Assumptions
10M / mo
100k / mo
1 TB / mo
What this builds
Ingress / Load BalancerWAF & Bot ManagementContent Delivery (CDN)×20480Managed Kubernetes×6Container Registry×200Distributed Cache×2Transactional DB×2Product Image Storage×392Message QueueEvent BusBackup Storage×32
Infrastructure Architecture Blueprint
Copy or download (export) Terraform and OpenTofu architecture blueprints to deploy this workload in a cloud provider of your choice. Add parameters, credentials, or steps for CLI and DevOps CI/CD pipelines.
Provider:
Engine:
| 1 | # ============================================================================== |
| 2 | # ARCHITECTURE BLUEPRINT (TERRAFORM / OPENTOFU) |
| 3 | # Copyright (c) 2026 Cosell Plus, LLC. All Rights Reserved. |
| 4 | # |
| 5 | # DISCLAIMER & TERMS OF USE: |
| 6 | # This IaC blueprint is generated by CompareCloudCosts (CCC) for educational, |
| 7 | # planning, and directional architectural purposes. Provided "AS IS" without |
| 8 | # warranty of any kind, express or implied. Cosell Plus, LLC assumes no |
| 9 | # liability for operational costs, misconfigurations, or service interruptions. |
| 10 | # Always review and validate security, IAM, and compliance parameters before |
| 11 | # deploying to production environment. |
| 12 | # ============================================================================== |
| 13 | # |
| 14 | # ------------------------------------------------------------------------------ |
| 15 | # IDENTITY & CREDENTIAL PLACEHOLDERS (CLI & DEVOPS CI/CD PIPELINE) |
| 16 | # ------------------------------------------------------------------------------ |
| 17 | # Steps to execute this blueprint using Terraform: |
| 18 | # 1. Save this file as main.tf |
| 19 | # 2. Set provider authentication credentials: |
| 20 | # |
| 21 | # For AWS Local CLI Execution: |
| 22 | # export AWS_ACCESS_KEY_ID="<YOUR_AWS_ACCESS_KEY_ID>" |
| 23 | # export AWS_SECRET_ACCESS_KEY="<YOUR_AWS_SECRET_ACCESS_KEY>" |
| 24 | # export AWS_REGION="<REGION>" |
| 25 | # |
| 26 | # For AWS DevOps CI/CD Pipeline (GitHub Actions / GitLab CI / Azure DevOps): |
| 27 | # Recommended: Use AWS OpenID Connect (OIDC) Role Assumption: |
| 28 | # - role-to-assume: "arn:aws:iam::123456789012:role/GitHubActionsDeployerRole" |
| 29 | # - aws-region: "<REGION>" |
| 30 | # |
| 31 | # 3. Initialize and apply: |
| 32 | # $ terraform init |
| 33 | # $ terraform plan |
| 34 | # $ terraform apply |
| 35 | # ------------------------------------------------------------------------------ |
| 36 | |
| 37 | # ------------------------------------------------------------------------------ |
| 38 | # PROVIDER CONFIGURATION (TERRAFORM) |
| 39 | # ------------------------------------------------------------------------------ |
| 40 | 🔑 terraform { |
| 41 | required_version = ">= 1.5.0" |
| 42 | required_providers { |
| 43 | aws = { |
| 44 | source = "hashicorp/aws" |
| 45 | version = "~> 5.0" |
| 46 | } |
| 47 | } |
| 48 | } |
| 49 | |
| 50 | 🔑 provider "aws" { |
| 51 | region = var.aws_region |
| 52 | |
| 53 | default_tags { |
| 54 | tags = { |
| 55 | ManagedBy = "Terraform" |
| 56 | Environment = var.environment |
| 57 | Workload = var.workload_id |
| 58 | Vendor = "Cosell Plus LLC Blueprint" |
| 59 | } |
| 60 | } |
| 61 | } |
| 62 | |
| 63 | 🔑 variable "aws_region" { |
| 64 | type = string |
| 65 | default = "us-east-1" |
| 66 | description = "Target AWS Deployment Region" |
| 67 | } |
| 68 | |
| 69 | 🔑 variable "environment" { |
| 70 | type = string |
| 71 | default = "production" |
| 72 | description = "Deployment environment (e.g. dev, staging, production)" |
| 73 | } |
| 74 | |
| 75 | 🔑 variable "workload_id" { |
| 76 | type = string |
| 77 | default = "workload-blueprint" |
| 78 | description = "Identifier tag for the workload" |
| 79 | } |
| 80 | |
| 81 | # ------------------------------------------------------------------------------ |
| 82 | # WORKLOAD COMPONENT RESOURCES (E-COMMERCE MICROSERVICES STACK) |
| 83 | # ------------------------------------------------------------------------------ |
| 84 | # Component: Ingress / Load Balancer (Fronts the microservices with a single entry point and traffic distribution (Reliability ≥ medium)) |
| 85 | 🔑 resource "aws_custom_🔑 resource" "load_balancer" { |
| 86 | # Add required parameters for Ingress / Load Balancer |
| 87 | } |
| 88 | |
| 89 | # Component: WAF & Bot Management |
| 90 | 🔑 resource "aws_wafv2_web_acl" "waf" { |
| 91 | name = "waf-waf-acl" |
| 92 | description = "Protects the storefront from malicious traffic and scraping (Security ≥ medium)" |
| 93 | scope = "REGIONAL" |
| 94 | |
| 95 | default_action { |
| 96 | allow {} |
| 97 | } |
| 98 | |
| 99 | visibility_config { |
| 100 | cloudwatch_metrics_enabled = true |
| 101 | metric_name = "wafWafMetric" |
| 102 | sampled_requests_enabled = true |
| 103 | } |
| 104 | |
| 105 | rule { |
| 106 | name = "AWSManagedRulesCommonRuleSet" |
| 107 | priority = 1 |
| 108 | |
| 109 | override_action { |
| 110 | none {} |
| 111 | } |
| 112 | |
| 113 | statement { |
| 114 | managed_rule_group_statement { |
| 115 | name = "AWSManagedRulesCommonRuleSet" |
| 116 | vendor_name = "AWS" |
| 117 | } |
| 118 | } |
| 119 | |
| 120 | visibility_config { |
| 121 | cloudwatch_metrics_enabled = true |
| 122 | metric_name = "CommonRuleSetMetric" |
| 123 | sampled_requests_enabled = true |
| 124 | } |
| 125 | } |
| 126 | } |
| 127 | |
| 128 | # Component: Content Delivery (CDN) (Global asset distribution for fast page loads) |
| 129 | 🔑 resource "aws_custom_🔑 resource" "cdn" { |
| 130 | # Add required parameters for Content Delivery (CDN) |
| 131 | } |
| 132 | |
| 133 | # Component: Managed Kubernetes (Container orchestration cluster) |
| 134 | 🔑 resource "aws_custom_🔑 resource" "kubernetes" { |
| 135 | # Add required parameters for Managed Kubernetes |
| 136 | } |
| 137 | |
| 138 | # Component: Container Registry (Stores microservice container images securely) |
| 139 | 🔑 resource "aws_custom_🔑 resource" "container_registry" { |
| 140 | # Add required parameters for Container Registry |
| 141 | } |
| 142 | |
| 143 | # Component: Distributed Cache |
| 144 | 🔑 resource "aws_elasticache_cluster" "cache" { |
| 145 | cluster_id = "cache-redis" |
| 146 | engine = "redis" |
| 147 | node_type = "cache.m6g.large" |
| 148 | num_cache_nodes = 1 |
| 149 | parameter_group_name = "default.redis7" |
| 150 | port = 6379 |
| 151 | } |
| 152 | |
| 153 | # Component: Transactional DB (Primary persistent store) |
| 154 | 🔑 resource "aws_custom_🔑 resource" "database" { |
| 155 | # Add required parameters for Transactional DB |
| 156 | } |
| 157 | |
| 158 | # Component: Product Image Storage (Object storage for product images and media across the catalog) |
| 159 | 🔑 resource "aws_custom_🔑 resource" "product_media" { |
| 160 | # Add required parameters for Product Image Storage |
| 161 | } |
| 162 | |
| 163 | # Component: Message Queue |
| 164 | 🔑 resource "aws_sqs_queue" "message_queue" { |
| 165 | name = "message_queue-queue" |
| 166 | delay_seconds = 0 |
| 167 | max_message_size = 262144 |
| 168 | message_retention_seconds = 864000 # 10 days |
| 169 | receive_wait_time_seconds = 20 # Long polling |
| 170 | visibility_timeout_seconds = 60 |
| 171 | |
| 172 | |
| 173 | } |
| 174 | |
| 175 | # Component: Event Bus (Fans "order-placed" events out to inventory, shipping, and analytics) |
| 176 | 🔑 resource "aws_custom_🔑 resource" "event_bus" { |
| 177 | # Add required parameters for Event Bus |
| 178 | } |
| 179 | |
| 180 | # Component: Backup Storage |
| 181 | 🔑 resource "aws_s3_bucket" "backup_storage" { |
| 182 | bucket_prefix = "ccc-backup_storage-" |
| 183 | force_destroy = false |
| 184 | } |
| 185 | |
| 186 | 🔑 resource "aws_s3_bucket_server_side_encryption_configuration" "backup_storage_enc" { |
| 187 | bucket = aws_s3_bucket.backup_storage.id |
| 188 | rule { |
| 189 | apply_server_side_encryption_by_default { |
| 190 | sse_algorithm = "AES256" |
| 191 | } |
| 192 | } |
| 193 | } |
| 194 | |
| 195 | |
| 196 | |
| 197 | |
| 198 | # ------------------------------------------------------------------------------ |
| 199 | # OUTPUTS |
| 200 | # ------------------------------------------------------------------------------ |
| 201 | 🔑 output "blueprint_summary" { |
| 202 | value = { |
| 203 | workload_id = "ecommerce-microservices" |
| 204 | 🔑 provider = "aws" |
| 205 | region = "us-east-1" |
| 206 | components = 11 |
| 207 | priorities = { |
| 208 | capacity = "medium" |
| 209 | performance = "medium" |
| 210 | reliability = "medium" |
| 211 | security = "medium" |
| 212 | } |
| 213 | } |
| 214 | } |
| 215 |