Teaching Case — A Database in a Public Subnet

Deliberately wrong, and the drawing of it is indistinguishable from a correct one — which is the point. The database sits in a subnet the document itself declares public, and the traffic path from the internet reaches it without passing through anything that terminates or filters. The engine names both, with the path it walked, so a reader can check the accusation rather than take it.

Cloud architectureArchitecture Cloud architecture syntax docs

Template previewCloud architecture

Make it your own.

title "Order service — as first drawn"
provider aws
note "Deliberately wrong. See the findings under the figure."

internet {
  user anyone "Anyone on the internet"
}

cloud prod "Production" {
  region eu-west-1 {
    network vpc "VPC" cidr 10.0.0.0/16 {
      igw gw "Internet gateway"

      zone eu-west-1a {
        subnet pub "Public subnet" public cidr 10.0.1.0/24 {
          ec2 web "Web server"
          rds db "Customer database"
        }
      }
    }
  }
}

anyone -> web : https 443
web -> db : postgres 5432
web ..> gw