Multi-AZ web application architecture spanning us-east-1a and us-east-1b with CloudFront distribution, Application Load Balancer, and dual t3.medium EC2 instances across availability zones. Traffic flows from CloudFront through Internet Gateway and ALB to app servers in private subnets, which route outbound traffic through NAT Gateways and connect to Aurora PostgreSQL 15.4 with primary-standby replication. IAM roles enforce least-privilege access to EC2 instances, while the VPC (10.0.0.0/16) isolates public, private app, and private database subnets across both AZs. This architecture eliminates single points of failure, distributes load, and ensures database failover capability for production workloads. Fork and customize this diagram on Diagrams.so to match your CIDR ranges, instance types, or add additional components like Auto Scaling Groups or RDS read replicas.