Design a multi-AZ VPC with appropriate subnet tiers, routing, controlled egress, VPC endpoints, security groups, and network ACLs.

Select and justify Route 53, CloudFront, WAF, API Gateway, ALB, or NLB components for a specified traffic, latency, availability, and security profile.