About This Architecture
Enterprise-grade web and API architecture on AWS using dual EKS clusters behind separate ALBs, with CloudFront CDN and API Gateway for global distribution. Web traffic flows through UltraDNS and AWS WAF to CloudFront and ALB-Web, while API requests route via API Gateway and AWS WAF to ALB-API, both terminating at independent EKS workload clusters in a VPC spanning 10.0.0.0/16. Data layer includes RDS db.r5.large instances, ElastiCache Redis for caching, and S3 for object storage, all encrypted via KMS and secrets managed through Secrets Manager. Observability and security are integrated across CloudWatch, CloudTrail, X-Ray, and Certificate Manager, providing comprehensive monitoring, audit trails, and TLS termination. Fork this diagram to customize subnets, instance types, or add multi-region failover and auto-scaling policies for your enterprise workloads.