Incremental Software Development Model
13th May 2021
IoT Technology & Protocols – 7 Important IoT Communication Protocols
21st May 2021
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.
CloudFront offers the most advanced security capabilities, including field level encryption and HTTPS support, seamlessly integrated with AWS Shield, AWS Web Application Firewall and Amazon Route 53 to protect against multiple types of attacks including network and application layer DDoS attacks. These services co-reside at edge networking locations – globally scaled and connected via the AWS network backbone – providing a more secure, performant, and available experience for your users.
CloudFront works seamlessly with any AWS origin, such as Amazon S3, Amazon EC2, Elastic Load Balancing, or with any custom HTTP origin. You can customize your content delivery through CloudFront using the secure and programmable edge computing features CloudFront Functions and AWS Lambda@Edge.
Benefits
Global Scaled Network for Fast Content Delivery
Amazon CloudFront is massively scaled and globally distributed. The CloudFront network has 225+ points of presence (PoPs) that are interconnected via the AWS backbone delivering ultra-low latency performance and high availability to your end users. The AWS backbone is a private network built on a global, fully redundant, parallel 100 GbE metro fiber network linked via trans-oceanic cables across the Atlantic, Pacific, and Indian Oceans, as well as, the Mediterranean, Red Sea, and South China Seas. Amazon CloudFront automatically maps network conditions and intelligently routes your user’s traffic to the most performant AWS edge location to serve up cached or dynamic content. CloudFront comes default with a multi-tiered caching architecture that offers you improved cache width and origin protection.
Security at the Edge
Amazon CloudFront is a highly secure CDN that provides both network and application-level protection. All your CloudFront distributions are defended by default against the most frequently occurring network and transport layer DDoS attacks that target your websites or applications with AWS Shield Standard. To defend against more complex attacks, you can add a flexible, layered security perimeter by integrating CloudFront with AWS Shield Advanced and AWS Web Application Firewall (WAF). Firewall rules, curated and managed by Amazon security experts, to protect against common CVEs and OWASP Top 10 security risks are provided to you with AWS Managed Rules for AWS WAF. Finally, CloudFront has the most advanced security compliance certifications namely PCI DSS, ISO/IEC, SOC 1/2/3, FedRAMP Moderate, HIPAA, and more.
Highly Programmable and Secure Edge Computing
With edge compute features CloudFront Functions and Lambda@Edge, you can easily run code across AWS locations globally, allowing you to personalize content and respond to your end users with improved latency. For example, you can use CloudFront Functions to deliver unique content based on visitor attributes, generate custom responses, or conduct A/B testing running your own custom code on AWS infrastructure. With Lambda@Edge, you can complement or entirely replace your origin servers. Lambda@Edge can be used for server-side rendering of web pages, manipulating streaming manifest files on-the-fly for ad insertion, or adding security tokens. Both CloudFront Functions and Lambda@Edge protect your data from attack with built-in security isolation.
Deep Integration with AWS
Amazon CloudFront is integrated with AWS services such as Amazon S3, Amazon EC2, Elastic Load Balancing, Amazon Route 53, and AWS Elemental Media Services for easy set-up. As a developer, you can use the AWS management console or familiar developer tools such as CloudFormation templates, the AWS Cloud Development Kit, and APIs. CloudFront’s integration with Amazon Cloudwatch and Kinesis offers real-time observability through metrics and logs.
Cost-Effective
Amazon CloudFront offers cost-effective content-delivery globally. Integrated with AWS, there are no transfer fees for origin fetches from any AWS origin and AWS Certificate Manager (ACM) offers custom TLS certificates, at no charge. CloudFront offers customizable pricing options including simple pay-as-you go pricing with no upfront fees and the CloudFront Security Savings Bundle that helps save up to an additional 30%. For steeper discounts, custom pricing is available for minimum traffic commitments (typically 10 TB/month or higher). Support for the CDN is included in your existing AWS Support subscription.
