Multi-AZ three-tier web application on AWS ECS Fargate with Route 53 DNS, CloudFront CDN, and WAF protection routing traffic through Application Load Balancers to containerized services. ECS Fargate tasks in private subnets across two availability zones connect to RDS PostgreSQL with Multi-AZ failover and ElastiCache Redis for caching, with container images pulled from ECR and secrets managed via Secrets Manager. This architecture demonstrates production-grade resilience, auto-scaling, and security best practices for enterprise workloads requiring high availability and minimal operational overhead. Fork and customize this diagram on Diagrams.so to match your VPC CIDR ranges, instance types, or add additional services like SQS or SNS. The separation of public, application, and data subnets with NAT Gateways ensures secure outbound connectivity while maintaining strict network isolation.