CloudFront & AWS Global Accelerator Flashcards
AWS Content Delivery Network
AWS CloudFront
What is the main difference between CloudFront and S3 Cross Region Replication?
CloudFront caches content at edge locations, but S3 Cross Region Replication attempts to replicate a bucket in a separate region by having near real-time updates
CloudFront Distribution option that allows you to create AllowLists and BlockLists based on a users country of origin
CloudFront Geo Restriction
CloudFront price class that uses all edge locations
Price Class All
CloudFront price class that uses most regions, but excludes some of the most expensive regions
Price Class 200
CloudFront price class that uses only the least expensive regions
Price Class 100
This CloudFront pricing feature allows you to reduce cost by limiting the number of edge locations your content is cached in
CloudFront Price Classes
A way to force an entire or partial CloudFront cache refresh, thus bypassing the TTL settings
CloudFront Invalidation
Service that improves performance for a wide range of applications over TCP or UDP by routing traffic to the nearest edge location
AWS Global Accelerator
Both AWS Global Accelerator and AWS CloudFront come with DDoS protection via integration with what other AWS Service?
AWS Shield
You have a CloudFront Distribution that serves your website hosted on a fleet of EC2 instances behind an Application Load Balancer. All your clients are from the United States, but you found that some malicious requests are coming from other countries. What should you do to only allow users from the US and block other countries?
CloudFront Geo Restriction
A networking service that sends your user’s traffic through Amazon Web Service’s global network infrastructure, improving your internet user performance by up to 60%
AWS Global Accelerator
How many global static customer-facing IPs does AWS Global Accelerator give you in order to to simplify traffic management?
Two
True/False: By design, delivering data out of CloudFront can be more cost-effective than delivering it from S3 directly to your users
True
CloudWatch supports this type of encryption, which ensures that sensitive information is encrypted at the edge
Field-level