// click any component for details
Infrastructure.
internet
👤 User / Browser
HTTPS
↓
cdn + static hosting
☁ CloudFront
CDN · HTTPS
🪣 S3
Static frontend
↓
load balancer
⚖ ALB
Path routing
↓
eks 1.32 — kubernetes cluster
🔐 auth
:8001
📦 products
:8002
🛒 cart
:8004
💳 payment
:8005
📋 orders
:8003
↓
data layer — db subnets
🗄 RDS PostgreSQL
db.t3.micro · pg15
⬢ ElastiCache Redis
cache.t3.micro
📨 SQS + DLQ
async orders
↓
platform + observability
◈ Terraform
16 .tf files
🔑 IAM
roles · IRSA
🛡 Security Groups
4 groups
◎ Prometheus · Grafana · Loki
Helm
🌐 VPC Networking
10.0.0.0/16 across 2 AZs. Public for ALB + NAT, private for EKS nodes, DB for RDS + Redis.
VPC 10.0.0.0/16Public ×2Private ×2DB ×2IGWNAT GatewayRoute Tables ×3Security Groups ×4
◈ Platform Layer
The tooling that turns the AWS stack and the cluster into something repeatable and secure.
Terraform IaCDocker / ECRALB + Ingress ControllerIRSAHelmSSM Parameter Store
🗄 Data & Messaging
Everything stateful lives in the DB subnets, reachable only from inside the cluster.
RDS PostgreSQLElastiCache RedisSQS + DLQ
◎ Observability
Full metrics + logs stack installed into the cluster via Helm.
PrometheusGrafanaLoki
◆ AI Layer (in progress)
Bringing the Mercedes-Benz RAG/MCP pattern to this platform's own infrastructure.
RAG Pipelinepgvector on RDSMCP ServerOps Copilot