Cloudfront Flashcards
Content Delivery Network (CDN) Improves read performance, content
is cached at the edge
Amazon CloudFront
DDoS protection (because worldwide), integration with Shield, AWS Web Application Firewall
Amazon CloudFront
Origins for Cloudfront
S3 or Custom Origin (HTTP)
Origin with enhanced security with CloudFront Origin Access Control (OAC)
S3
EC2
ALB
S3 website
are all origins for
Custom Origins (HTTP)
Cloudfront vs S3 Cross Region Replication
Service that is great for static content that must be available everywhere
Cloudfront
Cloudfront vs S3 Cross Region Replication
Service that is great for dynamic content that needs to be available at low-latency in few regions
S3 Cross Region Replication
When using EC2 as an origin do the EC2 instances have to be public?
Yes
When using ALB as an origin do the EC2 instances have to be public?
No
You can restrict who can access your distribution using allowlist, blocklist
CloudFront Geo Restriction
Force an entire or partial cache refresh after updating the back-end
origin
CloudFront Invalidation
Unicast IP vs Anycast IP
One server holds one IP address
Unicast IP
Unicast IP vs Anycast IP
All servers hold the same IP address and the client is routed to the nearest one
Anycast IP
Improves performance for a wide range of applications over TCP or UDP using the internet AWS network to leverage Intelligent routing to lowest latency and fast regional failover
AWS Global Accelerator
Good for HTTP use cases that require static IP addresses
AWS Global Accelerator
