You should ensure that your architecture is secure. Creating a threat model is the best way of getting an overview of your security. A threat model gives you an overview of the security risks, mitigations and the accepted risks. It will list the segregation of the application and infrastructure components.
The threat model contains four steps:
- Draw your architecture model
- Identify your trust boundaries
- Identify the theoretical and real security risks
- Describe mitigations for each security risk and register the accepted risks