AWS Service
Amazon CloudFront
CloudFront caches and delivers content from edge locations near users.
What This Service Solves
CloudFront caches and delivers content from edge locations near users.
- Use CloudFront for static and dynamic web acceleration, S3 origins, ALB origins, TLS at the edge, signed URLs, and global content delivery.
When You Should Not Use It
- Do not use CloudFront when the requirement is global network acceleration for non-HTTP traffic. Consider Global Accelerator.
What AWS Manages and What You Manage
AWS manages edge network. You manage distributions, origins, cache behaviors, invalidations, certificates, access controls, and headers.
Security Implications
Use OAC for S3 origins, HTTPS, WAF, signed URLs/cookies, origin custom headers, and logging.
Availability and Scaling
CloudFront improves user access and can shield origins, but origin availability still matters.
Caching reduces origin load. Cache key and TTL choices determine hit ratio.
Cost Behavior
Requests, data transfer out, invalidations, and origin fetches drive cost.
Common Integrations
- S3
- ALB
- API Gateway
- WAF
- ACM
- Route 53
How AWS Might Present It
Certification-Specific Depth
Solutions Architect Associate
Know configuration choices, integrations, failure modes, security, operations, and cost tradeoffs.
CloudOps Engineer Associate
Know configuration choices, integrations, failure modes, security, operations, and cost tradeoffs.
Related Comparisons
Sources and Review Metadata
This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.