AWS · Networking
Secure Multi-Subnet VPC Infrastructure
Production Account with Public Subnet ALB/Security Group and isolated Private Subnets for ECS and RDS Database. This diagram is written in ArchLex and passes AWS provider checks.
Diagram and source
provider aws
direction LR
validation normal
account production {
region us-east-1 {
vpc main-vpc {
subnet public-subnet {
load_balancer: alb
firewall: security-group
}
subnet private-app-subnet {
api_cluster: ecs
}
subnet private-db-subnet {
db_cluster: rds
}
}
}
}
load_balancer > firewall > api_cluster > db_clusterWhat is in this diagram.
Resources
- load_balancer Application Load Balancer
- firewall Security Group
- api_cluster Amazon ECS
- db_cluster Amazon RDS
Relationships
- load_balancer connects firewall
- firewall connects api_cluster
- api_cluster connects db_cluster
Boundaries
- account production
- region us-east-1
- vpc main-vpc
- subnet public-subnet
- subnet private-app-subnet
- subnet private-db-subnet
Render it yourself.
Save the source as secure-vpc-network.arch and render it with the CLI, or ask your agent to adapt it through the ArchLex MCP server.
npx @archlex/cli render secure-vpc-network.arch --output secure-vpc-network.svgRelated examples.
- VPC Subnet HierarchyProduction Account with us-east-1 Region, VPC, Subnet, and container database workload
- GCP VPC Network ArchitectureCloud Load Balancing routing to Compute Engine and Memorystore inside a regional VPC with subnets
- Cloudflare Public Edge to AWSCloudflare DNS, load balancing and WAF capabilities forwarding HTTPS requests to an AWS ALB
- Minimal Vertical SliceRDS Proxy, RDS Database, and ECS Service