+
+
+
🌐 Public Subnet (AZ-a)
+
+ ⚖️
+ Application Load Balancer
+
+
+ 🌉
+ NAT Gateway
+
+
+
+
↓ HTTPS (443)
+
+
+
+
🔐 Private Subnet (AZ-a)
+
+ 📦
+ ECS Cluster (3 EC2 nodes)
+
+
+ 🐳
+ Microservices (Containers)
+
+
+ 🗂️
+ ECR for images (central)
+
+
+
+
↓ Private Network
+
+
+
+
🔐 Private Subnet (AZ-b)
+
+ 💾
+ Amazon RDS (MySQL, Multi-AZ)
+
+
+ ⏰
+ Automated Backups (14 days)
+
+
+
+
↓
+
+
+
+ 🪣
+ Amazon S3
+ Images, logs, backups, versioning & replication
+
+
+
↓
+
+
+
+ 📊
+ Observability Stack
+ • Prometheus & Grafana
+ • CloudWatch / X-Ray
+
+
+
↓
+
+
+
+ 🔧
+ Jenkins (EC2 instance)
+ • Build & Push to ECR
+ • Deploy to ECS Cluster
+
+