Templates
Use these static templates as starting maps for common AWS production deployments.
Route 53 -> CloudFront -> S3, with ACM for TLS and optional WAF.
Use CloudFront invalidations carefully, block direct public S3 access, and add security headers.
API Gateway -> Lambda -> DynamoDB, with EventBridge or SQS for async work.
Design idempotency, throttling, auth, reserved concurrency, and rollback before launch.
CloudFront/WAF -> ALB -> ECS Fargate tasks across private subnets.
Tune health checks and deployment circuit breakers; keep databases outside tasks.
ALB -> compute layer -> Aurora/RDS Multi-AZ with private subnets.
Test failover, connection pooling, migrations, and point-in-time recovery.
EventBridge/SQS/SNS -> Lambda/ECS workers -> durable storage.
Plan poison-message handling and replay procedures before production traffic.
S3 data lake -> Glue catalog/jobs -> Athena/Redshift/OpenSearch/QuickSight.
Control query scan costs and define ownership for raw, curated, and published zones.