AWS API Gateway & CloudFront Overview
AWS API Gateway & CloudFront Overview
Step 6: CloudFront Delivers Content - CloudFront sends the content to the user from the
nearest server, which makes it load faster because it’s closer to the user.
Step 7: Future Requests - For future requests, CloudFront gives the content directly from its
cache, making the process even quicker.
Step 8: Cache Update (When Needed) - CloudFront checks with the main server regularly to
see if the content has been updated. If it has, CloudFront fetches the new version and
updates the cache for future use.
AWS CloudFront: CDN Cloud Service
AWS CloudFront: CDN Cloud Service
❖ Key Features of AWS CloudFront
1. Faster Content Delivery Across the Globe: CloudFront stores copies of your content in
multiple locations worldwide. When someone requests it, they get it from the nearest
location, making your website or app load much faster.
2. Works Seamlessly with AWS Services: You can easily connect CloudFront with S3 (for
storing files), EC2 (for hosting websites), API Gateway (for APIs), Route 53 (for domains),
AWS WAF (for security), and ELB (for load balancing).
3. Built-in Security & Protection Against Attacks: CloudFront helps block DDoS attacks and
malicious traffic using AWS Shield and AWS WAF. It also supports secure HTTPS
connections and access control to protect your content.
4. Efficient Caching for Both Static & Dynamic Content
• Static content like images, JavaScript, and CSS files are stored and delivered instantly.
• Dynamic content like APIs or personalized pages are optimized to load faster without
unnecessary delays.
5. Budget-Friendly & Scales with Your Needs: You only pay for what you use, and AWS
offers 1 TB of free data transfer per month in its Free Tier.
6. Super Low Latency & High Performance : CloudFront automatically finds the fastest
route to deliver content, ensuring smooth user experiences with minimal delays.
AWS CloudFront: CDN Cloud Service
❖ Companies using AWS CloudFront
• AWS Direct Connect is a cloud service that provides businesses with a secure,
high-bandwidth, and low-latency connection from their on-premises infrastructure directly
to AWS services. By bypassing the public internet, it ensures private, more reliable, and
secure data transfer. This direct connection is typically set up using fiber-optic cables or
Ethernet links to AWS Direct Connect locations, ensuring better network performance and
security for mission-critical applications.
AWS Direct Connect
AWS Direct Connect
❖ AWS Direct Connect Working
AWS Direct Connect works by creating a dedicated physical connection
between your on-premises network and an AWS Location. This connection
uses fiber and ethernet cables to link your network directly to an AWS router,
avoiding the public internet. Once the physical connection is in place, a virtual
interface (VIF) is set up to create a secure connection between your network
and AWS, allowing you to access AWS services easily and securely.
AWS Direct Connect
❖ Setting Up AWS Direct Connect
• Step 1: Connect an AWS Direct Connect Location - Select an AWS Direct Connect location
that is closest to your infrastructure. AWS provides a list of available locations on the
Direct Connect portal.
• Step 2: Select a Network Service Provider - Pick a network service provider from the AWS
Direct Connect Partners page. This provider will bridge the connection between your
on-premises network and AWS. When choosing, consider factors like bandwidth and
location.
• Step 3: Provision a Dedicated Network Connection - Provision a dedicated network
connection between your infrastructure and the chosen service provider’s location. This
physical link ensures the high performance and reliability of your AWS connection.
• Step 4: Configure the Virtual Interface - Log in to the AWS Management Console and
navigate to Direct Connect. Create a virtual interface by providing the VLAN ID, routing,
and other configuration details. Once completed, your AWS Direct connect connection
will be ready to access AWS service services such as Amazon VPC and Storage Services.
AWS Management Console -> Direct Connect -> Create virtual interface
AWS Direct Connect
❖ Benefits of Using AWS Direct Connect
• It provides a connection with high bandwidth and low latency, hence
reliability and performance are increased.
• Since a dedicated private connection is established completely bypassing the
public internet hence adds to the security of your connection.
• Data transfer over AWS Direct Connect is very cost-effective as compared to
using the typical public network.
AWS Direct Connect
❖ Use Cases of AWS Direct
Connect
In the accompanying image, you can see
how AWS Direct Connect enables a
secure private connection between
customer data centers and AWS. Two
Direct Connect locations are set up to
ensure high availability and redundancy.
This configuration can support
mission-critical workloads and provide
continuity even if one connection
experiences downtime. Each Direct
Connect location connects back to the
AWS Region's Virtual Private Cloud (VPC)
where AWS resources can be directly
accessed. This setup highlights the
flexibility and reliability of AWS Direct
Connect for businesses that require a
constant and private connection to their
AWS environment enhancing
performance and security across multiple
use cases.
AWS Direct Connect
❖ Difference Between AWS Direct Connect vs Site to Site VPN
Attribute AWS Direct Connect AWS Site-to-Site VPN
Typically takes longer to set up, as it Faster to set up, as it only involves
Time to Establish requires physical connection setup and configuration on both ends with no
configuration. physical setup required.
Offers a private, secure connection that Relies on encryption over the public
doesn’t go through the public internet, internet, which is secure but may have
Security
enhancing data security and reducing potential exposure risks compared to a
exposure risks. fully private connection.
AWS Direct Connect
❖ Pricing of AWS Direct Connect
There is no minimum setup fee for AWS Direct Connect, you have to pay for what you
use. Pricing is based on the following factors:
1. Capacity: It is the maximum rate at which can be transferred through the network, capacity of a
connection is measured in megabits per second(Mbps) or gigabits per second(Gbps).
2. Port hours: It measures the time for which a port is allocated for use with AWS, even when do
transfer is happening at that time you are charged for port hours, Port hours depend on two factors
namely, dedicated connection or hosted connection.
• Dedicated connections: physical connections from your premises port to the AWS network
port. These are billed as long as they are allocated for use, you can request for dedicated
connection through the AWS Direct Connect section of the AWS Management Console.
• Hosted connections: logical and you can request for hosted connection by directly contacting
your Delivery Partner.
3. Data transfer out (DTO): It refers to the total traffic out of the AWS from your network and is
charged per gigabyte (GB).
4. Data Transfer In (DTI): Just opposite of the DTO, it is the total traffic received in the network from
outside the AWS.
AWS Networking and Content
Delivery
❖ Introduction
Amazon Web Services (AWS) provides a comprehensive range of networking and content
delivery services to enable secure, high-performance, and reliable cloud solutions. These
services help organizations connect, manage, protect, and deliver applications and content
globally.
1. Network Foundations: Start with an Amazon VPC—your private, isolated cloud network.
You can extend it using Transit Gateway, Direct Connect, VPN, and PrivateLink, tailoring
connectivity to your hybrid cloud needs.
2. Traffic Routing and Management: Use Route 53 for domain management and advanced
routing. Leverage Elastic Load Balancing to distribute workloads and optimize
utilization.
3. Global Performance and Security: AWS Global Accelerator and CloudFront accelerate
content delivery and application access globally, using AWS’s robust infrastructure for
speed, security, and reliability.
4. Content Delivery: CloudFront caches your content at edge locations, serving users from
the closest location to minimize latency and bandwidth costs. Dynamic content delivery
is enhanced with intelligent routing and edge computing capabilities.
AWS Networking and Content
Delivery
❖ Benefits
• Amazon VPC or Amazon Virtual Private Cloud is a service that allows its users to launch
their virtual machines in a protected as well as isolated virtual environment defined by
them. You have complete control over your VPC, from creation to customization and even
deletion. It's applicable to organizations where the data is scattered and needs to be
managed well. In other words, VPC enables us to select the virtual address of our private
cloud and we can also define all the sub-constituents of the VPC like subnet, subnet mask,
availability zone, etc on our own.
• We can place the necessary resources and manage access to those resources in the VPC, a
private area of Amazon that we control.
• A default "VPC" will be generated when we register an AWS account, allowing us to
manage the virtual networking environment, the IP address, the construction of subnets,
route tables, and gateways.
Amazon VPC (Virtual Private Cloud)
❖ Amazon VPC (Virtual
Private Cloud) Architecture
The basic architecture of a
properly functioning VPC consists
of many distinct services such
as Gateway, Load
Balancer, Subnets, etc.
Altogether, these resources are
clubbed under a VPC to create an
isolated virtual environment.
Along with these services, there
are also security checks on
multiple levels. It is initially
divided into subnets, connected
with each other via route tables
along with a load balancer.
Amazon VPC (Virtual Private Cloud)
❖ Amazon VPC (Virtual Private Cloud) Components
• VPC: You can launch AWS resources into a defined virtual network using Amazon
Virtual Private Cloud (Amazon VPC). With the advantages of utilizing the scalable
infrastructure of AWS, this virtual network closely mimics a conventional network
that you would operate in your own data center. /16 user-defined address space
maximum (65,536 addresses)
• Subnets: A subnet is a smaller portion of the network that typically includes all the
machines in a certain area. We can add as many as subnets we need in one
availability zone. Each subnet must reside entirely within one availability zone. The
public subnets will be attached to Internet Gateway which enables Internet access.
The private subnets will not have internet access. To reduce traffic, the subnet will
divide the big network into smaller, connected networks. Up to /16, 200
user-defined subnets.
• Route Tables: Route Table contains a set of rules, called route which helps us to
route the network traffic. A single VPC can have as many as route tables it requires.
They are mainly used to Define the protocol for traffic routing between the
subnets.
Amazon VPC (Virtual Private Cloud)
❖ Amazon VPC (Virtual Private Cloud) Components
• Network Access Control Lists: NACL for VPC serve as a firewall by managing
both inbound and outbound rules. There will be a default NACL for each VPC
that cannot be deleted.
• Internet Gateway(IGW): With the help of IGW (Internet Gateway), the
resources present (e.g: EC2) in the VPC will enable to access the Internet.
One VPC can't have more than one IGW. If resources are running in a certain
VPC then IGW can not be detached from that particular VPC.
• Network Address Translation (NAT): An internal host can communicate with
an internet server with help of NAT. The internet and a private network are
separated by a NAT device. As a whole It will enable the connection between
the private subnet and the internet.
Amazon VPC (Virtual Private Cloud)
❖ Amazon VPC Benefits
• Advanced Security and Isolation: Provides logical network isolation, security groups, and network ACLs for
precise inbound/outbound filtering at subnet and instance levels. Enables private connectivity to AWS services
without exposing resources to the public internet.
• Flexibility and Control: Customize your IP address range, networking topology, routing tables, and subnets to
suit your workload requirements.
• Seamless Scalability: Easily scale resources up or down, deploy across multiple availability zones, and take
advantage of auto-scaling without hardware constraints.
• Integrated Monitoring and Management: Use VPC flow logs for detailed visibility into traffic, Network Access
Analyzer for compliance, and monitoring tools for infrastructure health.
• Cost Savings: Eliminate the need for costly on-premises hardware, benefit from pay-as-you-go pricing, and
automate routine network management tasks.
• High Availability and Disaster Recovery: Design environments for fault tolerance using multi-AZ deployments,
robust routing, and NAT gateways.
• Easy Integration: Integrate seamlessly with AWS services (EC2, RDS, S3, Lambda) and third-party solutions,
supporting diverse workloads within the same virtual network.
Amazon VPC (Virtual Private Cloud)
❖ Use cases of Amazon VPC
• Using VPC, you can host a public-facing website, a single-tier basic web
application, or just a plain old website.
• The connectivity between our web servers, application servers, and database
can be limited by VPC with the help of VPC peering.
• By managing the inbound and outbound connections, we can restrict the
incoming and outcoming security of our application.
AWS VPC Peering
❖ Introduction
• Utilization: With this peered connections, the resources within the peered VPCs can
communicate with each other seamlessly. This provides various use cases such as data
replication, resource sharing and application integration across multiple VPCs.
• Monitoring And Maintenance: Adminstrators continuously monitor the performance and
security of the VPC peering connection. They may also perform the maintenance tasks
such as updating route tables or adjusting security group rules as needed to optimize the
connection's performance and ensuring its reliability.
• Termination ( Optional ): If need arises, the adminstrators can look for terminating the
VPC peering connection. This effectively serves as the network link between the VPCs and
prevents further communication between them.
AWS VPC Peering
❖ Advantages of VPC Peering
Variable
Data Processing If data processing has done in VPC (Charge varies based on many
parameters)
Variable
It used for provding support to VPC
Support (Charge varies based on many
Connection