Networking & Content Delivery

Category: Amazon Route 53

Amazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowances

Running an internet-facing application means estimating and managing costs across many services and features: content delivery, web application firewall (WAF), DNS, logging, and DDoS protection. Each has its own pricing model, its own metering, its own line item on the bill. Traffic from successful launches, organic growth, and AI bots can spike without warning, increasing […]

How FIS centralized 13,000 VPC endpoints to strengthen security and simplify operations

How FIS centralized 13,000 VPC endpoints to strengthen security and simplify operations

FIS is a global leader in financial technology, delivering modern banking and payments solutions to institutions worldwide. Its Total Issuer Solutions business represents one of the largest credit issuing and processing platforms globally, serving clients in more than 75 countries and processing over 40 billion transactions annually. The portfolio combines FIS’s scale, data richness and AI capabilities […]

Enhanced security with DMZ architecture using Amazon VPC Block Public Access

Building production-ready DNS infrastructure with AWS CDK

DNS outages have immediate and severe ripple effects on enterprise infrastructure, yet many Amazon Web Services (AWS) organizations still manage Amazon Route 53 configurations manually instead of using infrastructure as code (IaC) tools such as AWS Cloud Development Kit (AWS CDK). Consider a common scenario: an engineer accidentally deletes a critical DNS record while troubleshooting. […]

Implementing fine-grained Amazon Route 53 access using IAM condition keys (Part 2)

Implementing fine-grained Amazon Route 53 access using IAM condition keys (Part 2)

In Part 1 of this series, we demonstrated a scalable solution of using Amazon Web Services Identity and Access Management (AWS IAM) conditional keys and AWS principal tags for fine-grained access control of shared Amazon Route 53 hosted zones, public or private, in the same AWS account. As user environments grow, AWS administrators and network […]

CloudFront flat-rate pricing

Amazon CloudFront flat-rate pricing plans: new features and expanded capabilities

In November 2025, we launched flat-rate pricing plans for Amazon CloudFront. Since launch, customers have shared feedback and we’ve been adding new capabilities. This post covers what’s new: support for Lambda@Edge, CAPTCHA, mutual TLS (mTLS), and an AI activity dashboard for visibility into AI bot and agent traffic. We’ve also clarified how plans handle traffic […]

Using cross-account CloudFront VPC origins for multi-account private API Gateway architecture

In November 2025, Amazon CloudFront introduced cross-account support for Virtual Private Cloud (VPC) origins, which allows you to keep Amazon VPC origins and CloudFront distributions in separate Amazon Web Services (AWS) accounts. In turn, organizations with multi-account strategies can use VPC origins while maintaining their desired account structure. This enables a new architectural pattern for […]

Implementing consistent DNS Query Logging with Amazon Route 53 Profiles

Managing DNS query logging across multiple Amazon Virtual Private Clouds (VPCs) has long been a significant challenge for enterprise teams. The traditional approach required manual configuration of DNS query logging for each VPC individually, creating a cascade of operational problems. This fragmented process led to inconsistent implementation across different environments, compliance gaps due to missed […]

Implementing ingress geo-restriction with AWS to reduce attack surface

Geo-restriction is a critical security control for blocking traffic from high-risk regions. Learn how to implement geographic filtering using Amazon CloudFront, Route 53, AWS WAF, and AWS Network Firewall—and discover when to use each service for your specific architecture needs.

Announcing Amazon Route 53 Accelerated Recovery for managing public DNS records

AWS announced the launch of accelerated recovery for managing public Domain Name System (DNS) records, a new Amazon Route 53 feature that targets a 60-minute Recovery Time Objective (RTO) for your DNS operations in the unlikely event of service disruptions in the N. Virginia Region (us-east-1). This feature ensures continuity for your critical workloads by […]

CloudFront flat-rate pricing

Introducing flat-rate pricing plans with no overages

Today, Amazon Web Services (AWS) is launching flat-rate pricing plans with no overages for website delivery and security. The pricing plans, available with Amazon CloudFront, combine global content delivery (CDN) with multiple AWS services and features into a monthly price with no overage charges, regardless of whether your website or application goes viral or faces […]