Multi-AZ three-tier web architecture spanning us-east-1a and us-east-1b with WAF, CloudFront CDN, and Route 53 routing user traffic through ALB to EC2 and ECS Fargate compute tiers. Application layer connects to RDS Primary/Standby, DynamoDB, ElastiCache, and S3 via private subnets across both availability zones. CloudWatch and CloudTrail provide observability and compliance logging, while IAM and Secrets Manager enforce security controls across the VPC (10.0.0.0/16). This architecture demonstrates AWS best practices for fault tolerance, auto-scaling, and defense-in-depth security. Fork and customize this diagram on Diagrams.so to match your region, instance types, or add additional services like SNS or SQS.