Production VPC 3-Tier

Production-Ready VPC from Day One

Stop building VPCs from scratch on every project. This CloudFormation template deploys a fully segmented 3-tier network across three Availability Zones — exactly how AWS Well-Architected recommends you do it.

What You Get

• Public, private, and isolated subnet tiers across 3 AZs (9 subnets total)
• NAT Gateways per AZ for high-availability outbound traffic
• VPC endpoints for S3 and DynamoDB — cut NAT costs, keep traffic private
• VPC Flow Logs to CloudWatch with configurable retention
• Internet Gateway and appropriate route tables pre-wired

Subnet Architecture

Public subnets host load balancers and bastion hosts. Private subnets run your application tier. Isolated subnets hold databases and caches with no route to the internet — not even through NAT.

What You Deploy With

aws cloudformation deploy \n  --template-file vpc-3tier.yaml \n  --stack-name prod-vpc \n  --parameter-overrides Environment=prod

Included Files

• vpc-3tier.yaml — main CloudFormation template
• parameters/prod.json — production parameter overrides
• parameters/staging.json — staging parameter overrides
• README.md — architecture diagram, deployment steps, cost notes