Multi-AZ three-tier production architecture spanning two AWS availability zones with Route 53 DNS, CloudFront CDN, and WAF protecting dual Application Load Balancers. EC2 Auto Scaling groups in private subnets across AZ-1 and AZ-2 connect to RDS Primary and Standby databases with read replicas, while NAT Gateways enable secure outbound traffic and VPC Endpoints provide private access to S3 and Secrets Manager. CI/CD pipeline via CodePipeline, CodeBuild, CodeDeploy, and CodeCommit automates deployments, while cross-cutting services including IAM, KMS, CloudTrail, CloudWatch, GuardDuty, Shield, and Security Hub enforce security, compliance, and observability across the entire VPC. This architecture demonstrates AWS best practices for fault tolerance, zero-trust networking, and automated infrastructure management. Fork and customize this diagram on Diagrams.so to match your specific region, instance types, or database tier requirements.