The Wizard's Guide to Well-Architected IaC Workloads