Networking & Content Delivery
Category: Advanced (300)
Automating AWS Transit Gateway attachments to a transit gateway in a central account
As IT environments grow, they can become more complex, with additional accounts, VPCs, and the networking between them. AWS Transit Gateway is a service that addresses networking complexity by building a hub-and-spoke network to simplify your network routing and security. With Transit Gateway, you can connect your Virtual Private Clouds (VPCs) that span multiple accounts […]
Using multiple content delivery networks for video streaming – part 1
Introduction Today, viewing video content is a prevalent form of online activity whether in entertainment, education, marketing, or information. For example, as a Solutions Architect at AWS, I tend to watch hours of video a week to learn about technologies, and I also leverage video content to convey ideas and best practices in a scalable […]
Analyzing and visualizing AWS Global Accelerator flow logs using Amazon Athena and Amazon QuickSight
AWS Global Accelerator simplifies multi-region cloud deployments while leveraging the AWS vast, highly available, and congestion-free global network. Global Accelerator uses a pair of static anycast IP addresses to direct you to the application that is geographically closest and has healthy endpoints, using routing policies that you configure. This feature makes sure that you have […]
Authorization@Edge using cookies: Protect your Amazon CloudFront content from being downloaded by unauthenticated users
Enterprise customers who host private web apps on Amazon CloudFront may struggle with a challenge: how to prevent unauthenticated users from downloading the web app’s source code (for example, React, Angular, or Vue). In a separate blog post, you can learn one way to provide that security using Amazon Lambda@Edge and Amazon Cognito, with an example […]
Integrating AWS Transit Gateway with AWS PrivateLink and Amazon Route 53 Resolver
An update was made on October 6, 2025: With the availability of Amazon Route 53 Profiles, the below design approach can be greatly simplified and is no longer recommended. Instead we recommend to use of this new capability, as outlined in the blog post “Streamlining multi-VPC DNS management with Amazon Route 53 Profiles and interface […]
Continually Enhancing Domain Security on Amazon CloudFront
Last year, a colleague of mine wrote a blog post about new security measures that Amazon CloudFront was implementing to enhance the security of how domains are used on CloudFront distributions. This included mitigations to prevent the abusive use of domain fronting practices by not allowing SSL handshake requests and subsequent requests over the secured […]