Multi-AZ ECS Fargate architecture spanning eu-west-2 with dual availability zones, blending On-Demand and Spot instances across high-resource and standard services. Traffic flows through API Gateway and Route 53 to an Internal ALB protected by AWS WAF, routing to five target groups via Cloud Map service discovery. Data persists in Aurora PostgreSQL Serverless v2 with primary-secondary replication, EBS, and EFS, while secrets, encryption keys, and audit trails are centrally managed via Secrets Manager, KMS, and CloudTrail. VPC endpoints for ECR, SQS, SNS, CloudWatch Logs, and Systems Manager ensure private, secure service access without internet exposure. Fork this diagram to customize subnets, scaling policies, or add Transit Gateway and Cloud WAN attachments for hybrid banking workloads.