Enterprise API governance platform spanning three VPCs across experience, process/middleware, and system/backend layers with comprehensive security, observability, and hybrid connectivity. Internet users, partners, and on-premise systems connect through WAF, Route 53, CloudFront, and multiple API Gateway instances enforcing OAuth2, mTLS, and IAM authentication. EventBridge, Step Functions, and container orchestration (ECS/EKS) enable event-driven workflows, while RDS Aurora, DynamoDB, and Redshift provide multi-model data persistence with cross-account CloudWatch, X-Ray, and CloudTrail governance. This architecture demonstrates zero-trust API design, least-privilege IAM, and compliance-ready observability critical for regulated financial and enterprise workloads. Fork this diagram on Diagrams.so to customize subnets, add additional regions, or integrate with your existing Terraform IaC pipelines. Consider adding AWS API Gateway resource policies and VPC Flow Logs for enhanced network forensics.