AWS · Networking

Secure Multi-Subnet VPC Infrastructure

Production Account with Public Subnet ALB/Security Group and isolated Private Subnets for ECS and RDS Database. This diagram is written in ArchLex and passes AWS provider checks.

Diagram and source

Secure Multi-Subnet VPC Infrastructure: Production Account with Public Subnet ALB/Security Group and isolated Private Subnets for ECS and RDS DatabaseSecure Multi-Subnet VPC Infrastructure: Production Account with Public Subnet ALB/Security Group and isolated Private Subnets for ECS and RDS Database
provider aws
direction LR
validation normal

account production {
  region us-east-1 {
    vpc main-vpc {
      subnet public-subnet {
        load_balancer: alb
        firewall: security-group
      }
      subnet private-app-subnet {
        api_cluster: ecs
      }
      subnet private-db-subnet {
        db_cluster: rds
      }
    }
  }
}

load_balancer > firewall > api_cluster > db_cluster

What is in this diagram.

Resources

Relationships

Boundaries

Render it yourself.

Save the source as secure-vpc-network.arch and render it with the CLI, or ask your agent to adapt it through the ArchLex MCP server.

npx @archlex/cli render secure-vpc-network.arch --output secure-vpc-network.svg

All examples