- Introduction to Amazon Web Services (AWS)
- Identity Access Management (IAM)
- IAM Policy
- IAM Authentication
- Elastic Compute Cloud (EC2)
- Elastic Block Storage (EBS)
- Elastic Load Balancer (ELB)
- Auto Scaling Groups and Launch Configurations
- Elastic File System (EFS)
- Elastic Beanstack
- DNS and Route 53
- Elastic Container Service (ECS)
- Storage Gateway
- Virtual Private Clouds (VPC)
- Network Access Control Lists (NACL)
- Security Groups (VPC SG)
- Network Address Translation (NAT) Instances, NAT Gateways, Egress only Internet Gateways and Bastion Hosts
- Simple Storage Service (S3)
- Cloud Watch
- Cloudtrail Logs
- CloudFront CDN
- Cloud Formation
- Relational Database Service (RDS)
- DynamoDB NoSQL key value and document database
- Redshift
- Amazon Aurora RDS
- Elasticache
- AWS Simple Notification Service (SNS)
- Simple Queue Service (SQS)
- Simple Workflow Service (SWF)
- Elastic Transcoder
- API Gateway
- AWS Kinesis
- Security on AWS
- Overview of Security Processes – Summary of the Whitepaper
- Lambda
- Additional Topics
- AWS Well-Architected framework (February 2018 CSAA Exam)
- Architecting for the AWS Cloud – Best Practices
- AWS CSAA – Released February 2018 Exam Questions
- My day at the AWS CSAA (Released February 2018) certification exam
CloudFront CDN
- CloudFront is AWS content delivery network service
-
Amazon CloudFront can provide Content Delivery Network (CDN) functionality for many types of origins including
-
Amazon Elastic Compute Cloud (Amazon EC2) instances
-
AWS Elastic Load Balancing (ELB)
-
Amazon Simple Storage Service (Amazon S3)
- Route53
-
on-premises applications and sites.
-
- When you create a web distribution, CloudFront assigns a domain name to the distribution, such as d6736837jhsdga.cloudfront.net. You can use this domain name in the URLs for your content, for example:
http://d6736837jhsdga.cloudfront.net/logo.jpg.Alternatively, you might prefer to use your own domain name in URLs, for example:http://cdn.example.com/logo.jpg.If you want to use your own domain name, use Amazon Route 53 to create an alias record that points to your CloudFront distribution. - Edge locations are where your data (S3/EC2/ELB/Route53) cached, with low latency. Edge locations are different from regions and availability zones
- Distribution: A name given to the CDN containing a collection of edge locations
- Can do READ/WRITE (GET, OPTIONS, POST, PUT, PATCH)
- Content is temporarily cached on CF edge locations
- TTL is number of seconds before the cache expires (at which time new copy is fetched from origin)
- Invalidation: You can clear cache before TTL forcibly, but costs extra.
- S3-accelerated uses edge locations to read/write to S3 buckets
-
Amazon CloudFront can serve private content by using
-
Signed URLs
-
Signed cookies
-
Amazon Simple Storage Service (Amazon S3) Origin Access Identifiers.
- Restrict content based on geolocation (whitelist and blacklist)
-
- To ensure that your users access your objects using only CloudFront URLs, regardless of whether the URLs are signed, perform the following tasks:
- Create an origin access identity, which is a special CloudFront user, and associate the origin access identity with your distribution.
- Change the permissions on your S3 bucket or on the objects so only the origin access identity has read permission (or read and download permission).
- When your end users access your Amazon S3 objects through CloudFront, the CloudFront origin access identity gets the objects on behalf of your end users.
- If your users request objects directly by using Amazon S3 URLs, they’re denied access. The origin access identity has permission to access objects in your Amazon S3 bucket, but users don’t.
- Distribution types
- Web Distribution
- RTMP (media streaming / flash) Distribution – for Adobe flash files only