AWS three-tier production architecture combining CloudFront CDN, WAF v2 protection, and Application Load Balancers across two availability zones for high availability. Traffic flows from users through CloudFront and WAF v2 to dual ALBs in public subnets, which distribute requests to containerized microservices (Orders, Users, Payments) running on ECS Fargate in private subnets. The data layer uses Aurora PostgreSQL with primary-replica replication across AZs, enabling read scaling and automatic failover. This design demonstrates AWS best practices for security, availability, and scalability in production workloads. Fork and customize this diagram on Diagrams.so to match your VPC topology, service names, or instance types. The architecture isolates public, application, and data layers using subnet segmentation and security groups, reducing blast radius and enforcing least-privilege access patterns.