A solutions architect must design a highly available application with web, application, and database tiers. HTTPS content should be delivered as close to the edge as possible with minimal latency, and the solution must be MOST secure. Which solution meets these requirements?

The correct solution places EC2 instances in private subnets for enhanced security, as they are not directly accessible from the internet. A public Application Load Balancer (ALB) distributes traffic to these instances, providing high availability and load balancing. Amazon CloudFront, a Content Delivery Network (CDN), delivers HTTPS content globally from edge locations, minimizing latency for users. CloudFront uses the public ALB as its origin, ensuring that all requests for dynamic content are routed through the ALB to the secure backend. Incorrect options: Placing EC2 instances in public subnets is less secure as they are directly exposed to the internet. Using EC2 instances directly as the CloudFront origin bypasses the ALB's load balancing and health check capabilities, reducing availability and making the architecture less robust.