AWS Cloud Native System Architecture Blueprint

// Sample React API Client
const apiClient = axios.create({
  baseURL: process.env.API_URL,
  timeout: 5000,
  headers: {
    'Content-Type': 'application/json'
  }
});

apiClient.interceptors.response.use(null, (error) => {
  if (error.config && error.response && error.response.status >= 500) {
    return new Promise((resolve) => {
      setTimeout(() => resolve(apiClient(error.config)), 1000);
    });
  }
  return Promise.reject(error);
});

export const fetchData = (endpoint) =>
  apiClient.get(`/${endpoint}`, {
    headers: {
      'Cache-Control': 'max-age=60, stale-while-revalidate=3600'
    }
  });
                

# Terraform for API Gateway
resource "aws_api_gateway_rest_api" "cloud_native" {
  name        = "cloud-native-api"
  description = "API Gateway for Cloud Native Platform"
  endpoint_configuration {
    types = ["REGIONAL"]
  }
}

resource "aws_api_gateway_authorizer" "jwt" {
  name          = "jwt-authorizer"
  rest_api_id   = aws_api_gateway_rest_api.cloud_native.id
  authorizer_uri = aws_lambda_function.authorizer.invoke_arn
  type          = "TOKEN"
  identity_source = "method.request.header.Authorization"
}

resource "aws_wafv2_web_acl_association" "api" {
  resource_arn = aws_api_gateway_stage.prod.arn
  web_acl_arn  = aws_wafv2_web_acl.api.arn
}
                

{
  "family": "microservice-a",
  "networkMode": "awsvpc",
  "containerDefinitions": [
    {
      "name": "app",
      "image": "my-app:1.0",
      "portMappings": [
        {
          "containerPort": 8080,
          "protocol": "tcp"
        }
      ],
      "essential": true,
      "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
          "awslogs-group": "/ecs/microservice-a",
          "awslogs-region": "us-west-2",
          "awslogs-stream-prefix": "app"
        }
      }
    },
    {
      "name": "envoy",
      "image": "aws-appmesh-envoy:v1.22.2.0-prod",
      "essential": true,
      "environment": [
        {
          "name": "APPMESH_RESOURCE_NAME",
          "value": "microservice-a"
        }
      ],
      "user": "1337",
      "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
          "awslogs-group": "/ecs/microservice-a",
          "awslogs-region": "us-west-2",
          "awslogs-stream-prefix": "envoy"
        }
      }
    }
  ],
  "requiresCompatibilities": ["FARGATE"],
  "cpu": "512",
  "memory": "1024",
  "executionRoleArn": "arn:aws:iam::123456789012:role/ecsTaskExecutionRole",
  "taskRoleArn": "arn:aws:iam::123456789012:role/ecsTaskRole"
}
                

AWSTemplateFormatVersion: '2010-09-09'
Resources:
  Mesh:
    Type: AWS::AppMesh::Mesh
    Properties:
      MeshName: cloud-native-mesh
      Spec:
        EgressFilter:
          Type: ALLOW_ALL
  VirtualNodeA:
    Type: AWS::AppMesh::VirtualNode
    Properties:
      MeshName: !Ref Mesh
      VirtualNodeName: microservice-a
      Spec:
        ServiceDiscovery:
          DNS:
            Hostname: microservice-a.default.svc.cluster.local
        Listeners:
          - PortMapping:
              Port: 8080
              Protocol: http
        Backends:
          - VirtualService:
              VirtualServiceName: microservice-b.default.svc.cluster.local
  VirtualNodeB:
    Type: AWS::AppMesh::VirtualNode
    Properties:
      MeshName: !Ref Mesh
      VirtualNodeName: microservice-b
      Spec:
        ServiceDiscovery:
          DNS:
            Hostname: microservice-b.default.svc.cluster.local
        Listeners:
          - PortMapping:
              Port: 8080
              Protocol: http
  VirtualRouter:
    Type: AWS::AppMesh::VirtualRouter
    Properties:
      MeshName: !Ref Mesh
      VirtualRouterName: microservice-b-router
      Spec:
        Listeners:
          - PortMapping:
              Port: 8080
              Protocol: http
  Route:
    Type: AWS::AppMesh::Route
    Properties:
      MeshName: !Ref Mesh
      VirtualRouterName: !Ref VirtualRouter
      RouteName: microservice-b-route
      Spec:
        HttpRoute:
          Match:
            Prefix: /
          Action:
            WeightedTargets:
              - VirtualNode: !Ref VirtualNodeB
                Weight: 100
          RetryPolicy:
            MaxRetries: 3
            PerRetryTimeout:
              Unit: ms
              Value: 2000
            HttpRetryEvents:
              - server-error
                

-- RDS Schema (PostgreSQL)
CREATE TABLE entities (
  id UUID PRIMARY KEY,
  name VARCHAR(255) NOT NULL,
  attributes JSONB,
  created_at TIMESTAMPTZ DEFAULT NOW(),
  updated_at TIMESTAMPTZ
);

-- DynamoDB Schema
{
  "TableName": "Entities",
  "KeySchema": [
    { "AttributeName": "pk", "KeyType": "HASH" },  // "ENTITY#123"
    { "AttributeName": "sk", "KeyType": "RANGE" }  // "METADATA"
  ],
  "GlobalSecondaryIndexes": [
    {
      "IndexName": "NameIndex",
      "KeySchema": [
        { "AttributeName": "name", "KeyType": "HASH" }
      ],
      "Projection": { "ProjectionType": "INCLUDE", "NonKeyAttributes": ["attributes"] }
    }
  ]
}
                

Resources:
  HighCPUMetricAlarm:
    Type: AWS::CloudWatch::Alarm
    Properties:
      AlarmName: HighCPUUsage
      AlarmDescription: Triggers when ECS CPU usage exceeds 80%
      MetricName: CPUUtilization
      Namespace: AWS/ECS
      Statistic: Average
      Period: 300
      EvaluationPeriods: 2
      Threshold: 80
      ComparisonOperator: GreaterThanThreshold
      Dimensions:
        - Name: ClusterName
          Value: CloudNativeCluster
      AlarmActions:
        - !Ref SNSTopic
      TreatMissingData: notBreaching
  SNSTopic:
    Type: AWS::SNS::Topic
    Properties:
      TopicName: CloudNativeAlerts