Networking & Content Delivery
Author: Sagar Desarda
Sagar Desarda is the Head of the Technical Account Manager (TAM) organization for Data, Analytics, and GenAI ISVs. Sagar's team partners with customers to optimize their AWS architecture and ensure the seamless operation of their business-critical applications. Additionally, Sagar serves as the AMER leader for the Edge Networking Services Specialist team, where he drives new business growth, fosters technical engagements, and authors customer-facing publications.
Amazon CloudFront now supports mTLS authentication to origins
Starting today, Amazon CloudFront extends its mutual TLS (mTLS) capabilities to customer origins, which enables true end-to-end authentication throughout the entire connection path—from the viewers to the customer origins. CloudFront has supported viewer mTLS between viewers and CloudFront, so that customers can strongly authenticate clients before traffic ever enters their perimeter. With this launch, that […]
Trust goes both ways: Amazon CloudFront now supports viewer mTLS
Starting today, Amazon CloudFront supports viewer mTLS authentication from end users to CloudFront, enhancing security for highly distributed and sensitive applications. In modern architectures, securing client-server communication necessitates more than standard TLS, and mTLS extends this model by enforcing bidirectional authentication. This makes sure that both the client and the server verify each other’s identity […]
Amazon CloudFront now supports IPv6 origins for end-to-end IPv6 delivery
IPv6 adoption continues to accelerate worldwide as organizations move beyond the limitations of IPv4 address space. At Amazon Web Services (AWS), we’ve long supported IPv6 from end users to our Amazon CloudFront network, helping end users reduce latency, improve performance, and reach on modern mobile networks. Now, we are excited to take it a step […]
Introducing CloudFront Virtual Private Cloud (VPC) Origins: Shield your web applications from public internet
Starting today, Amazon CloudFront introduced CloudFront Virtual Private Cloud (VPC) Origins, a new feature that allows users to use CloudFront to deliver content from applications hosted in a VPC private subnet. VPC Origins eliminates the need for applications to be exposed on the public internet by restricting access solely through users’ CloudFront distributions. This is […]
Zero-rating and IP address management made easy: CloudFront’s new anycast static IPs explained
Starting today, Amazon CloudFront supports anycast IPs, a set of dedicated IP addresses that the customers can use to access CloudFront POPs for delivery of zero-rated traffic into the network carriers. For end-customers accessing your application, you now can collaborate with network carriers to exempt data charges from your end-customers’ data limits or implement distinct […]
Achieving Zero-downtime deployments with Amazon CloudFront using blue/green continuous deployments
[An update was made on May 13, 2025]: As AWS CodeCommit is no longer available to new customers, the option has been removed from the overview diagram. Blue/green deployment is a widely used deployment technique in software development aimed at minimizing downtime and risks associated with introducing new code. The strategy involves concurrently running two […]
Optimize SEO with Amazon CloudFront
Search Engine Optimization (SEO) is the practice of optimizing your website to rank higher on search engine results pages. Since organic search is a primary way for viewers to discover online content, a solid SEO strategy involves optimizing your web application and maintaining good performance. As more than 92% of the internet searches happen on […]