Multi-AZ ecommerce application spanning two AWS availability zones with WAF, CloudFront CDN, and Route 53 for global traffic distribution and DDoS protection. Application layer uses Auto Scaling Groups of EC2 t3.medium instances behind an Application Load Balancer in public subnets, while RDS Primary and Standby databases in private subnets ensure data redundancy across AZ-1 and AZ-2. S3 serves static assets via CloudFront, with CloudWatch, Secrets Manager, KMS, and CloudTrail providing observability, secrets management, encryption, and compliance auditing. This architecture demonstrates AWS best practices for fault tolerance, security, and scalability in production ecommerce workloads. Fork and customize this diagram on Diagrams.so to adapt subnet sizing, instance types, or add additional services like ElastiCache or SQS.