About This Architecture
Multi-AZ voice agent architecture combining Amazon Connect for telephony, ECS Fargate for stateless agent services, and Bedrock LLMs for intelligent conversation across two availability zones in us-east-1. Inbound PSTN calls route through Route 53 DNS, WAF, and CloudFront CDN to Amazon Connect, which authenticates via Cognito before invoking containerized agents via API Gateway. Agent services in each AZ scale automatically, query RDS Primary/Standby databases and OpenSearch vector knowledge bases for context, and emit traces to CloudWatch and X-Ray. Network Firewall and Transit Gateway enforce zero-trust segmentation; NAT Gateway and VPN Gateway provide secure egress and hybrid connectivity. This architecture demonstrates enterprise-grade resilience, observability, and least-privilege access for production voice AI workloads. Fork and customize this diagram on Diagrams.so to adapt subnets, scaling policies, or add additional regions. Consider adding DynamoDB for session state or EventBridge for asynchronous workflows in extended deployments.