Network virtualization with combined control of network and IT resources enables network designs for end-to-end cloud services with latency and availability guarantees. Even though providing such QoE guarantees is of high importance for cloud services, it is mostly not possible today if the services traverse different domains. To addresses this problem, firstly, we introduce novel resilient design methods for virtual networks minimizing the cost or the latency of the virtual network. We realize the routing of the services and the mapping of the virtual network simultaneously. Secondly, we provide two fundamental cloud connection architectures, which provide end-to-end resilience for cloud services in the presence of both network and datacenter failures. Using extensive simulations, we evaluate the performance of the proposed architectures in terms of cost of the virtual networks and maximum end-to-end delay that they can guarantee for cloud services.