Three-tier AWS web app spanning two availability zones with WAF, Application Load Balancer, and Auto Scaling EC2 instances across public and private subnets. Traffic flows from users through WAF and ALB to t3.medium EC2 instances in an Auto Scaling Group, which connect to RDS PostgreSQL primary and read replica databases in separate private subnets. RDS Multi-AZ standby replica and S3 static assets provide durability and performance, while NAT Gateways enable secure outbound connectivity from private subnets. This architecture demonstrates AWS best practices for fault tolerance, load distribution, and database high availability across regions. Fork and customize this diagram on Diagrams.so to adapt subnet sizing, instance types, or add additional services like CloudFront or ElastiCache.