Three-tier e-commerce architecture spanning two availability zones with Route 53 DNS, CloudFront CDN, and S3 static assets protected by WAF and Shield Standard. Internet-facing ALB routes traffic to frontend EC2 instances in private subnets, which communicate via internal ALB to backend services and RDS MySQL with Multi-AZ failover and read replicas. CI/CD automation via CodePipeline and CloudFormation enables rapid deployment, while Secrets Manager, KMS, IAM roles, and Systems Manager Session Manager enforce security and access control across all tiers. CloudWatch monitoring and Amazon Bedrock AI integration provide observability and intelligent shopping features. Fork this diagram to customize instance types, subnet ranges, or add additional services like ElastiCache or SQS.