<p>I start an AWS Amplify Gen 2 architecture with user journeys, not a list of AWS services. The public visitor, signed-in user, editor, and scheduled job each need a clear path through the application. Once I can describe those paths, I can decide which data, authentication, storage, and function resources belong together.</p><p>Amplify lets a project define backend resources in TypeScript. That convenience does not remove architecture work. Resource names, permissions, failure handling, and deployment ownership still determine whether another developer can operate the application six months later.</p>

<h2>Map the user-facing paths</h2>

<p>I write a short sequence for each important action. A contact request might pass through browser validation, a server function, an email provider, and an audit event. A published article might pass through an editor identity, a data mutation, and cache revalidation. These paths show where trust changes and where a failure must be reported.</p><p>I keep optional features outside the first map. Building every possible resource at the start makes authorization and deployment reviews noisy. The first backend should support the smallest complete user journey.</p>

<h2>Group resources by responsibility</h2>

<p>I keep auth definitions with identity concerns, data schemas with their authorization rules, storage with path policies, and each function in a directory named for its job. The backend entry file composes those resources. It should read like an inventory rather than contain every implementation detail.</p><p>Functions get narrow names such as <code>send-contact-notification</code> or <code>publish-scheduled-posts</code>. A generic utilities function tends to collect unrelated permissions and makes incident diagnosis slower.</p>

<h2>Define authorization with the data</h2>

<p>Every model gets a stated audience and operation list. I decide public read, signed-in access, owner access, and administrator access before connecting the frontend. The <a href="https://docs.amplify.aws/react/build-a-backend/data/customize-authz/">Amplify authorization documentation</a> is the reference for the rule syntax and its current limitations.</p><p>I also review fields that should never reach a public query. Splitting internal notes, delivery details, or private identifiers into a protected model can be clearer than relying on every query to omit them.</p>

<h2>Keep external systems behind functions</h2>

<p>Email providers, payment services, and private APIs need credentials that do not belong in browser code. I put those calls in an Amplify Function, validate its input, and return a small result that the interface can explain. The <a href="https://docs.amplify.aws/react/build-a-backend/functions/set-up-function/">Amplify Functions documentation</a> covers the current resource and handler structure.</p><p>A function also needs an owner, timeout expectation, retry decision, and logging policy. I avoid recording message bodies or credentials in logs. Operational details belong in the design because they affect support after launch.</p>

<h2>Design environments before the first release</h2>

<p>I decide which Git branches can deploy, which values differ by branch, and who can promote a change. Development can use synthetic data. Staging should resemble production without delivering mail or modifying real records. Production receives only changes that passed the same repeatable checks.</p><p>The <a href="https://docs.amplify.aws/react/deploy-and-host/fullstack-branching/branch-deployments/">Amplify fullstack branch deployment documentation</a> explains isolated fullstack branch deployments. I still verify the generated outputs file and deployed commit because a successful build can point the frontend at the wrong backend.</p>

<h2>Write rollback and ownership notes</h2>

<p>Infrastructure changes can alter data models and permissions, so rollback is more than redeploying old frontend code. I record whether a schema change is backward compatible, how data will be restored, and which resources must be retained.</p><ul><li>Map each user journey and trust boundary.</li><li>Keep resource files focused.</li><li>Test authorization before UI polish.</li><li>Separate branch configuration.</li><li>Document deployment and recovery ownership.</li></ul>

<h2>Need help with Amplify?</h2>

<p>Terry Hunt Dev helps teams plan and build full-stack applications through <a href="/services/aws-development">AWS development</a> and <a href="/services/nextjs-development">Next.js development</a>. Use the <a href="/contact">contact form</a> to describe the user journeys and backend resources you need reviewed.</p>

See how I structure an AWS Amplify Gen 2 application around user journeys, backend responsibilities, authorization, environments, and rollback checks.

How I Structure an AWS Amplify Gen 2 Application

A practical Amplify Gen 2 architecture built around user journeys, resource ownership, authorization, and deployment boundaries.

Architecture Resources & Benchmarks

How I Structure an AWS Amplify Gen 2 Application

Need hands-on help with Architecture?