Consent & Privacy Service  ·  View 07 of 22  ·  Structure

Layered Architecture

Eight layers; six of them are repeated per jurisdiction, and exactly one is allowed to be global.

Editable source SVG draw.io All views
Surfaces Consent banner Preference centre Rights portal Agent console Product service SDK Edge & API CloudFront + WAF API Gateway Subject authn & step-up Jurisdiction router Ledger (SoR) Consent ledger append-only Identity resolution index Projection Current state Batch snapshot Projection builder Decision Decision API Last-known-good cache Batch evaluator Withdrawal stream Rights Case intake Case orchestrator Identity resolver Propagation First-party adapters 40 Recipient adapters 60 Suppression list Absence prober Evidence Tamper-evident audit Point-in-time replay Records of processing streams snapshot + version instruction Layered Architecture Application we own Interface / broker Security / platform Data store Queue / topic synchronous event / async Layers 3 to 8 are repeated per jurisdiction. Only the purpose registry, which holds no personal data, is global. v 1.0 · owner Security & Identity Architecture

Decisions

  • The ledger sits above the projection, not beside it: current state is derived and disposable, and any decision can name the ledger version it relied on.
  • Only the purpose registry is global, and only because it holds no personal data. Consent metadata is personal data and stays in its jurisdiction.
  • The identity resolution index is placed in the ledger layer rather than the rights layer, because it is durable truth about linkage rather than workflow state.

Assumptions

  • A purpose registry change is visible to every regional decision plane within 120 s.
  • Projection rebuildable from the ledger at ≥ 20× real time; RTO 60 minutes for a region's full projection.

Omissions

  • Four edges are drawn out of roughly thirty. The rest are the ordinary top-to-bottom calls the layering already implies.
  • The consuming product services are not a layer here — they are drawn as enforcement points in views 08 and 10.
◀  Journey — Answer a Regulator All views Platform Components  ▶
Solution Architecture v1.0 · Amazon Web Services · Security & Identity Architecture · 2026-1007-layered-architecture