Prometrica's AWS Linux VPS architecture combines a hardened EC2 instance running NestJS API with a multi-layer security perimeter including Route 53, ACM, WAF, and public/private subnet isolation across a 10.0.0.0/16 VPC. The t3.medium EC2 instance in the private app subnet connects to RDS PostgreSQL for persistence, S3 for file storage, SES for email, and SQS for asynchronous job processing, with Lambda handling report generation. Secrets Manager and KMS provide encryption and credential management, while CloudWatch monitors application health and SNS routes notifications to Twilio for SMS and voice alerts. This architecture demonstrates defense-in-depth with DMZ isolation, managed service integration, and event-driven workflows ideal for candidate management platforms requiring compliance and scalability. Fork this diagram on Diagrams.so to customize subnets, add auto-scaling groups, or integrate additional AWS services like DynamoDB or ElastiCache.