AWS Service

Amazon CloudFront

CloudFront caches and delivers content from edge locations near users.

What This Service Solves

CloudFront caches and delivers content from edge locations near users.

  • Use CloudFront for static and dynamic web acceleration, S3 origins, ALB origins, TLS at the edge, signed URLs, and global content delivery.

When You Should Not Use It

  • Do not use CloudFront when the requirement is global network acceleration for non-HTTP traffic. Consider Global Accelerator.

What AWS Manages and What You Manage

AWS manages edge network. You manage distributions, origins, cache behaviors, invalidations, certificates, access controls, and headers.

Security Implications

Use OAC for S3 origins, HTTPS, WAF, signed URLs/cookies, origin custom headers, and logging.

Availability and Scaling

CloudFront improves user access and can shield origins, but origin availability still matters.

Caching reduces origin load. Cache key and TTL choices determine hit ratio.

Cost Behavior

Requests, data transfer out, invalidations, and origin fetches drive cost.

Common Integrations

  • S3
  • ALB
  • API Gateway
  • WAF
  • ACM
  • Route 53

How AWS Might Present It

Certification-Specific Depth

Related Comparisons

Sources and Review Metadata

This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.