AWS Well-Architected rubric. Auto-applied by the cf shim in AWS infrastructure projects; also invocable directly.