Multi-AZ VPC architecture spanning two availability zones with public, application, and data tiers, each protected by security groups and NAT gateways for secure outbound traffic. Traffic flows from users through CloudFront CDN and Route 53 to Application Load Balancers in each AZ, distributing requests to Auto Scaling Groups of EC2 t3.medium instances. Backend services connect to RDS PostgreSQL with primary-standby replication and ElastiCache Redis with primary-replica caching for low-latency data access. Comprehensive observability integrates CloudWatch, CloudTrail, X-Ray, and S3 log buckets, while WAF, Shield, IAM, KMS, and Secrets Manager enforce defense-in-depth security across the VPC. Fork this diagram on Diagrams.so to customize subnets, instance types, or add additional tiers for your production workloads.