Multi-AZ network architecture spanning two AWS availability zones with Route 53 DNS, CloudFront CDN, WAF, and Shield DDoS protection fronting dual Application Load Balancers. Traffic routes through Internet Gateways to Auto Scaling Groups of t3.medium EC2 instances in private app subnets, with RDS Multi-AZ database failover between us-east-1a and us-east-1b. VPC Endpoints for S3, Secrets Manager, and CloudWatch enable secure private connectivity without NAT Gateway costs, while IAM, KMS encryption, CloudTrail auditing, GuardDuty threat detection, and CodePipeline CI/CD automation provide defense-in-depth security and compliance. Fork this diagram to customize subnets, instance types, or add additional AZs for your production environment. The architecture demonstrates AWS Well-Architected Framework principles: high availability through multi-AZ redundancy, security via least-privilege IAM and encryption, and operational excellence through automated CI/CD deployment.