🌐 Public Subnet (AZ-a)
⚖️
Application Load Balancer
🌉
NAT Gateway
↓ HTTPS (443)
🔐 Private Subnet (AZ-a)
📦
ECS Cluster (3 EC2 nodes)
🐳
Microservices (Containers)
🗂️
ECR for images (central)
↓ Private Network
🔐 Private Subnet (AZ-b)
💾
Amazon RDS (MySQL, Multi-AZ)
⏰
Automated Backups (14 days)
↓
🪣
Amazon S3
Images, logs, backups, versioning & replication
↓
📊
Observability Stack
• Prometheus & Grafana
• CloudWatch / X-Ray
↓
🔧
Jenkins (EC2 instance)
• Build & Push to ECR
• Deploy to ECS Cluster