direction: down

client: "Client\ncabinet comptable"
admin: "Administrateur"
acces: "Accès d'administration" {
  vpn: "VPN\nd'administration"
}
ra: "Région A" {
  za: "Zone A" {
    api: "API\nfacturation"
    pg: "PostgreSQL\nprimaire" { shape: cylinder }
    snap: "Instantanés\ndu volume" { shape: cylinder }
    api -> pg: "SQL" { class: principal }
    pg -> snap: "chaque heure"
  }
  zb: "Zone B" {
    rep: "PostgreSQL\nréplique" { shape: cylinder }
  }
  za.pg -> zb.rep: "réplication"
}
rb: "Région B" {
  copie: "Copie nocturne\nnon verrouillée" { shape: cylinder }
}
kms: "KMS\ndu cloud" { shape: cylinder }
siem: "SIEM" { shape: cylinder }
cmdb: "CMDB\ntenue à la main" { shape: cylinder }

client -> ra.za.api: "HTTPS" { class: principal }
admin -> acces.vpn: "mot de passe" { class: principal }
acces.vpn -> ra: "tout le réseau"
ra.za.pg -> rb.copie: "copie à 1 h"
ra.za.pg -> kms: "clé de données" { class: indirect }
acces.vpn -> siem: "connexions" { class: indirect }
cmdb -> ra: "décrit" { class: indirect }