Cloud reference architectures

Vendor reference apps and infrastructure-as-code for running AI apps on Azure or Google Cloud.

agent-landing-zone leads with 64, ahead of fullstack-solution-template-for-agentcore (44) and azurechat (42). 7 projects ranked by score.

The ranking

Cloud reference architectures: full ranking
RankProjectAdoptionFreshnessMaintenanceEasy to runAgent-readyScore
1agent-landing-zoneAzure infrastructure templates for deploying enterprise agent apps on Microsoft Foundry1.2k stars, MIT, last commit Oct 20265910098333064 out of 100
2fullstack-solution-template-for-agentcoreReact frontend and AgentCore backend starter, deployed to AWS with CDK or Terraform597 stars, Apache-2.0, last commit Oct 202647100670044 out of 100
3azurechatPrivate enterprise chat on Azure OpenAI with document chat and personas1.4k stars, MIT, last commit Aug 202669100160042 out of 100
#4openai-chat-app-quickstartMinimal Quart chat app on Azure OpenAI with managed identity254 stars, MIT, last commit Sep 2026231001033040 out of 100
#5get-started-with-ai-agentsAzure azd template for a Foundry agent chat app with file search374 stars, MIT, last commit Oct 202635100130033 out of 100
#6serverless-rag-demoAWS CDK sample for document RAG chat and multi-agent workflows on Bedrock223 stars, MIT-0, last commit Oct 202651002617033 out of 100
#7openai-chat-vision-quickstartQuart chat app that answers questions about uploaded images via Azure OpenAI224 stars, MIT, last commit Oct 202614100200029 out of 100

Momentum, Verified build, Docs and Privacy are not measured yet; their weight goes to the signals shown. A dash means the signal is not scored for that kind of project. Hover a number for its rating in words.

Reviews

164 out of 100

agent-landing-zone

Azure infrastructure templates for deploying enterprise agent apps on Microsoft Foundry

1.2k stars, MIT, last commit Oct 2026

Agent Landing Zone is an azd and Bicep template that provisions a Zero-Trust Azure environment for agent applications on Microsoft Foundry. `azd up` deploys the infrastructure plus UI, orchestrator and ingestion apps, each from its own Azure repository. `azd provision` deploys the infrastructure alone. It was previously named GPT-RAG.

Strengths

  • Infrastructure-only mode via `azd provision`, with apps deployed later using `azd deploy`
  • Component versions pinned in manifest.json for reproducible releases
  • Custom apps can replace the defaults through app-definition.json
  • MIT license; docs cover network-isolated deployment

Weaknesses

  • Tied to Azure and Microsoft Foundry; no other cloud is mentioned
  • Default UI, orchestrator and ingestion code live in three separate repositories
  • README gives no cost, quota or resource sizing figures
  • Prerequisites and configuration are only in external docs, not the README
  • Python
  • Needs Azure, Microsoft Foundry, Azure OpenAI, Azure AI Search, Azure Developer CLI
  • GitHub template
244 out of 100

fullstack-solution-template-for-agentcore

React frontend and AgentCore backend starter, deployed to AWS with CDK or Terraform

597 stars, Apache-2.0, last commit Oct 2026

A forkable starter that deploys a React/TypeScript chat frontend on Amplify Hosting, authenticated through Cognito, in front of an Amazon Bedrock AgentCore backend. The baseline is a multi-turn agent with a Lambda text-analysis tool behind AgentCore Gateway and the AgentCore Code Interpreter. Agent patterns exist for Strands and LangGraph, and the repo includes steering docs meant to be fed to coding assistants.

Strengths

  • Deploys with CDK or Terraform; Cognito JWT auth and Cedar policies on Gateway are included
  • Agent patterns for both Strands and LangGraph under patterns/
  • Frontend uses React, Vite, Tailwind and shadcn components
  • Extensive docs for memory, streaming, sessions, observability and swapping out Cognito

Weaknesses

  • Requires AWS and Amazon Bedrock AgentCore; no other backend is supported
  • README calls it a proof-of-value, not production-ready
  • Baseline is only a simple chat agent with two tools
  • No tagged releases
  • Python, Amazon Bedrock
  • Needs AWS account, Amazon Bedrock AgentCore, Amazon Cognito, AWS Amplify Hosting, AWS Lambda, API Gateway
  • Docker
342 out of 100

azurechat

Private enterprise chat on Azure OpenAI with document chat and personas

1.4k stars, MIT, last commit Aug 2026

Microsoft solution accelerator: a Next.js chat app deployed into your own Azure subscription with azd up or a Deploy to Azure button, protected by an identity provider (Entra ID setup scripted), with chat over uploaded files, personas, extensions and managed-identity RBAC instead of keys. Supports private endpoints and ESLZ-compliant deployment. For organizations wanting a ChatGPT-like tenant on Azure OpenAI.

Strengths

  • Managed identity removes almost all keys and secrets
  • Chat over files, personas and extensions documented in docs/
  • Private endpoints and ESLZ-compliant deployment supported
  • azd template plus GitHub Actions deploy path

Weaknesses

  • Azure only; provisions several paid services
  • Identity provider setup is mandatory before first use
  • Contributions require a Microsoft CLA
  • README defers most detail to docs/; no tests mentioned
  • TypeScript, Azure OpenAI
  • Needs Azure subscription, Azure OpenAI, Entra ID or another identity provider
#440 out of 100

openai-chat-app-quickstart

Minimal Quart chat app on Azure OpenAI with managed identity

254 stars, MIT, last commit Sep 2026

Python Quart backend using the openai package with a plain HTML/JS frontend that streams JSON Lines over a ReadableStream, plus Bicep for Azure OpenAI, Container Apps, Container Registry, Log Analytics and RBAC roles, deployed with azd up. Authenticates to Azure OpenAI with managed identity, so no API key; the local dev server runs on port 50505 after a first azd deploy. For teams starting a chat service on Azure.

Strengths

  • Managed identity auth; no OpenAI key in config
  • Bicep provisions the full Container Apps stack
  • Codespaces and Dev Container configs included
  • IaC security scan GitHub Action included

Weaknesses

  • Local run depends on a prior Azure deployment for the endpoint
  • No user auth; sibling repos add Entra ID
  • Frontend is minimal HTML/JS, not a component framework
  • Azure Container Registry has a fixed daily cost
  • Bicep, Azure OpenAI (openai package)
  • Needs Azure subscription with Azure OpenAI access, azd CLI
  • GitHub template
  • env example file
#533 out of 100

get-started-with-ai-agents

Azure azd template for a Foundry agent chat app with file search

374 stars, MIT, last commit Oct 2026

Deploys a web chat app on Azure Container Apps backed by a Microsoft Foundry Agent Service agent. The agent answers from uploaded files using file search or optional Azure AI Search and returns citations. Tracing goes to Application Insights, and the repo includes Pytest-based agent evaluation and red-teaming scans.

Strengths

  • Single `azd up` provisions Foundry project, model, Container App, storage and monitoring
  • Tracing via Application Insights and Azure Monitor included
  • Pytest agent evaluation and AI Red Teaming scans included
  • Managed Identity used for deployment and local development

Weaknesses

  • Requires an Azure subscription and Foundry model quota; no non-Azure path
  • README warns the code is a showcase, not production-ready without extra security
  • Costs are usage-based and the README gives no estimate
  • Deployment takes 7–15 minutes with `azd up`; teardown up to 20
  • Bicep, gpt-5-mini (default), other Azure AI models configurable
  • Needs Microsoft Foundry, Foundry Agent Service, Azure Container Apps, Azure Container Registry, Azure Storage, Azure AI Search (optional), Application Insights (optional), Log Analytics (optional)
#633 out of 100

serverless-rag-demo

AWS CDK sample for document RAG chat and multi-agent workflows on Bedrock

223 stars, MIT-0, last commit Oct 2026

Deploys a RAG chat app on AWS with one `sh deploy.sh` wizard that runs `cdk deploy --all`. Documents are indexed through a Bedrock Knowledge Base into OpenSearch Serverless NextGen and queried with hybrid BM25 + KNN search. A Strands Graph multi-agent runtime on Bedrock AgentCore routes requests to specialist nodes for code, presentations, web search, weather and retrieval.

Strengths

  • Hybrid BM25 + KNN search with per-user document isolation
  • Demo OCU mode scales to zero, so idle cost is listed as $0
  • Full infrastructure as Python CDK stacks, with Cognito auth and CloudFront hosting
  • MIT-0 license with no attribution requirement

Weaknesses

  • AWS only: Bedrock, AgentCore, OpenSearch Serverless and Cognito are all required
  • Models fixed to Claude Sonnet/Opus 4.6 and Titan Embed V2; no other providers listed
  • Supported in six regions only; us-west-1 and ap-southeast-1 excluded
  • No release tags, and tests cover CDK unit checks only
  • Python, Claude Sonnet 4.6, Claude Opus 4.6, Amazon Titan Embed Text V2
  • Needs AWS account, Amazon Bedrock, OpenSearch Serverless NextGen, Bedrock AgentCore, Amazon Cognito, CloudFront, S3, Docker, AWS CDK CLI
  • Docker
#729 out of 100

openai-chat-vision-quickstart

Quart chat app that answers questions about uploaded images via Azure OpenAI

224 stars, MIT, last commit Oct 2026

A Python Quart backend uses the openai package to send user messages and uploaded images to a GPT-4o deployment on Azure OpenAI. The frontend is plain HTML/JS that streams JSON Lines responses, with browser speech input and output buttons. Bicep files and azd provision Azure OpenAI, Container Apps, Container Registry and Log Analytics, using managed identity by default.

Strengths

  • One azd up provisions Azure OpenAI, Container Apps, registry, logging and RBAC
  • Managed identity by default, so no API key in app config
  • Can point at a local OpenAI-compatible endpoint (Ollama doc) for development
  • Speech input/output uses free built-in browser APIs

Weaknesses

  • Deploying needs Azure subscription and role-assignment write permissions
  • Basic HTML/JS frontend with no auth or multi-user features
  • Container Registry has a fixed daily cost even when idle
  • Local dev server still needs Azure credentials or a compatible endpoint
  • Jupyter Notebook, GPT-4o (Azure OpenAI), OpenAI-compatible endpoints
  • Needs Azure OpenAI, Azure Container Apps, Azure Container Registry, Azure Developer CLI
  • env example file

Written from each project's README and checked facts. Spot something wrong? Report it on GitHub (opens in a new tab).