About This Architecture

Three-tier AWS architecture featuring WAF-protected ingress through an Application Load Balancer distributing traffic to EC2 instances. Internet traffic flows through WAF to ALB, which load-balances requests across App Server 1 and App Server 2 in the Application Tier. Both EC2 instances connect to a shared RDS Database in the Data Tier, ensuring data consistency and simplified management. This pattern demonstrates AWS best practices for defense-in-depth security and horizontal scaling of stateless application servers. Fork this diagram on Diagrams.so to customize subnet configurations, add Auto Scaling groups, or export as .drawio for your documentation.

People also ask

How do I design a secure three-tier web application architecture on AWS with WAF and ALB?

Route internet traffic through AWS WAF to an Application Load Balancer, which distributes requests across EC2 app servers in a Public Subnet. App servers connect to an RDS Database in the Data Tier for persistent storage.