Singapore Red Cross deploys a three-tier AWS architecture in ap-southeast-1 with Route 53 DNSSEC DNS, AWS WAF and Application Load Balancer protecting public ingress, and ECS Fargate clusters across two Availability Zones handling containerized workloads. Application tier connects to Multi-AZ Amazon RDS PostgreSQL with primary-standby replication for data resilience and automatic failover. AWS Security Hub, GuardDuty, CloudWatch, and VPC Flow Logs provide unified security monitoring and compliance visibility across the VPC (10.0.0.0/16), while AWS Backup maintains disaster recovery nodes and AWS CodePipeline orchestrates Infrastructure-as-Code deployments. This architecture demonstrates defense-in-depth security, high availability, and operational excellence for mission-critical humanitarian services. Fork and customize this diagram on Diagrams.so to adapt the pattern for your organization's AWS region and compliance requirements. The separation of public, application, data, and management subnets enforces least-privilege network segmentation aligned with AWS Well-Architected Framework security pillar.