Multi-AZ three-tier web application spanning two AWS availability zones with CloudFront CDN, Application Load Balancers, Auto Scaling EC2 instances, and RDS PostgreSQL primary-replica replication. Traffic flows from users through CloudFront to Internet Gateway, then to ALBs across AZ-1 and AZ-2, distributing requests to t3.medium EC2 instances in private app subnets protected by app-sg security groups. Application tier reads and writes to RDS PostgreSQL Primary in AZ-1 and reads from Read Replica in AZ-2, while NAT Gateways enable outbound connectivity and CloudWatch monitors all layers. This architecture demonstrates AWS best practices for fault tolerance, auto-scaling, and separation of concerns across presentation, application, and data tiers. Fork and customize this diagram on Diagrams.so to match your VPC CIDR blocks, instance types, and database configurations.