All notes

Platform architecture

Design the platform as a product

· 4 minute read

An internal platform is successful when product teams choose it because it removes work, not because governance forces them to use it. That changes the architecture question from “what infrastructure should we standardise?” to “what recurring developer problem should we solve?”

Start with a user journey

Map the path from an idea to a production service. A useful first version usually covers a small number of high-friction steps: creating a repository, obtaining an environment, deploying safely, observing the service, and requesting support. Record how long each step takes, where approvals wait, and where teams build their own workaround.

The platform boundary should follow those repeated problems. A portal without reliable deployment primitives is a catalogue, not a platform. A collection of Terraform modules without documentation, support, and versioning is a library, not a product.

Define a contract, not a golden cage

A paved road should make the safe path fast while preserving an explicit escape hatch. Define:

  • the interface a team consumes;
  • the security and operational controls supplied by default;
  • the responsibilities that remain with the service team;
  • the supported lifecycle and migration policy;
  • the process for capabilities the platform does not cover.

This contract matters more than the implementation. It allows the platform team to replace an underlying tool without surprising its users.

Measure outcomes

Adoption alone is weak evidence. A platform can have mandatory adoption and still create expensive friction. Combine quantitative signals—lead time, deployment frequency, failed changes, environment provisioning time, support volume—with interviews and workflow observation. The DORA research program provides a useful starting point for delivery measures, while the CNCF platform engineering white paper frames platforms as products serving internal users.

Track the cost transferred to product teams as carefully as the cost removed from the platform team. If a standard reduces central effort but adds manual work to every service owner, it is not leverage.

Keep the first promise narrow

Begin with one well-understood service archetype and make its path excellent. Publish ownership, service levels, known constraints, and a roadmap tied to user evidence. Expand only when the first path is reliable enough that teams recommend it to one another.

A good platform does not hide engineering decisions. It packages the common ones, makes exceptional ones visible, and gives teams a dependable path from code to operation.

A concrete service contract

Consider a platform capability called “production web service.” Its contract could accept a repository, runtime, owner, data classification, availability tier, and scaling range. In return it creates build and deployment workflows, workload identity, network policy, dashboards, alerts, a service catalogue entry, and a documented support path. The contract should identify what it does not provide: perhaps persistent databases, cross-region recovery, or public ingress without security review.

That boundary gives teams enough information to decide whether the paved road fits. It also lets the platform team test the complete promise. A successful infrastructure plan is not sufficient if the deployment never becomes observable or the ownership record is missing.

Design the operating model

Every platform capability needs an owner, support hours, service objectives, incident process, and upgrade policy. Decide how breaking changes are communicated and how long old versions remain supported. Make dependency status visible so product teams can distinguish an application failure from a platform failure.

Use contribution paths carefully. Product teams may submit improvements, but the platform team still owns coherence, review, documentation, and long-term support. An internal open-source model without maintainers merely distributes responsibility ambiguously.

Common failure modes

  • Portal-first delivery: a polished front end masks unreliable or manual workflows.
  • Mandatory adoption: usage rises while workarounds and resentment remain invisible.
  • Unlimited flexibility: every option becomes supported, so upgrades become impossible.
  • No migration funding: a better platform exists, but teams cannot leave the old path.
  • Platform as project: funding ends at launch even though users need continuing operation.

Review checklist

Before adding a capability, confirm that a named user problem exists, the interface and responsibilities are written, the full journey is automated and tested, operational ownership is funded, success measures include user effort, and a retirement or migration path exists. If those answers are weak, more technology will not make the platform a product.

Continue reading