Comprehensive AWS security architecture implementing the Well-Architected Security Pillar with defense-in-depth: WAF and Shield at the edge, network segmentation via VPC and security groups, IAM and Cognito for identity, GuardDuty and Security Hub for threat detection, and CloudTrail for audit logging. Fork this diagram on Diagrams.so to customize the security controls and detection layers for your compliance requirements. Source: https://aws.amazon.com/architecture/well-architected/