Multi-AZ three-tier architecture on AWS ECS Fargate with CloudFront, WAF v2, and Route 53 protecting containerized microservices across us-east-1a and us-east-1b. Traffic flows through AWS Shield Standard and WAF v2 to CloudFront, then Route 53 to dual Application Load Balancers routing requests to Auth, Order, and Notification services running in ECS Fargate clusters. Data tier uses DynamoDB with Global Table replication for low-latency reads and cross-AZ resilience. This pattern demonstrates AWS best practices for production workloads: defense-in-depth security, container orchestration, managed databases, and observability via CloudWatch and X-Ray. Fork and customize this diagram on Diagrams.so to match your service topology, subnet CIDR blocks, or add additional tiers. Consider adding VPC Flow Logs, GuardDuty, or Config for enhanced security posture.