Networking & Content Delivery

Category: Technical How-to

Achieving Zero-downtime deployments with Amazon CloudFront using blue/green continuous deployments

[An update was made on May 13, 2025]: As AWS CodeCommit is no longer available to new customers, the option has been removed from the overview diagram. Blue/green deployment is a widely used deployment technique in software development aimed at minimizing downtime and risks associated with introducing new code. The strategy involves concurrently running two […]

Host Single Page Applications (SPA) with Tiered TTLs on CloudFront and S3

Many of our customers use Amazon CloudFront and Amazon Simple Storage Service (Amazon S3) to deploy Single Page Applications (SPA): web applications created with React, Angular, Vue, etc. The development teams of these SPAs often have the following, seemingly conflicting, requirements: Users should experience as little latency as possible in downloading the web application. Therefore, […]

Attach multiple IPs to a NAT Gateway to scale your egress traffic pattern

AWS NAT Gateway is a highly available and horizontally scalable Network Address Translation (NAT) service. AWS NAT Gateway allows resources in a private subnet to connect to target resources outside the subnet using the NAT Gateway’s IP address. These target resources can either be in the same VPC, a different VPC, on the internet, or […]

Best practices and considerations to migrate from VPC Peering to AWS Transit Gateway

This post presents recommendations and best practices when migrating your existing VPCs from Amazon Virtual Private Cloud (VPC) Peering to AWS Transit Gateway. It includes a migration walkthrough and considerations that you can address to improve your odds of a seamless migration. This post also details common networking testing and bench-marking tools such as iPerf […]

Connecting VPCs securely and at scale

Connecting VPCs securely and at scale to 3rd party public services in on-premises networks

There are many things to consider when connecting your Amazon Virtual Private Clouds (Amazon VPCs) to third-party applications running in data centers outside AWS. You need connections that are secure and scalable, especially when the third-party vendor uses a multi-tenant architecture. With multi-tenant services, where they have many of their customers sharing the same system, […]

Migrating sub 1 Gbps hosted connection to use AWS Transit Gateway – Part 1

Introduction This blog will describe the recommended migration approach for migrating existing hybrid connectivity architectures with sub 1 Gbps AWS Direct Connect hosted connections to AWS Transit Gateway. It will provide you with a target architecture along with step-by-step prescriptive guidance on how to migrate from your existing state. Key benefits you can derive from […]

Migrating sub 1 Gbps hosted connection to use AWS Transit Gateway – Part 2

Introduction Since the launch of AWS Transit Gateway, customers have been asking to use transit virtual interface (Transit VIF) on sub 1 Gbps AWS Direct Connect hosted connections. In this post, we describe how to migrate an existing environment that uses sub 1Gbps Direct Connect hosted connections, Transit Gateway, and transit VPC for hybrid connectivity. […]

Tag-based invalidation in Amazon CloudFront

In this post, we demonstrate how to implement tag-based invalidation in Amazon CloudFront with Lambda@Edge, Amazon DynamoDB, AWS Lambda, and AWS Step Functions. This post provides you with a reference architecture and sample code artifacts to help you deploy and test tag-based invalidation. Let’s look at some use cases where tagging pages together might be […]

Optimize SEO with Amazon CloudFront

Search Engine Optimization (SEO) is the practice of optimizing your website to rank higher on search engine results pages. Since organic search is a primary way for viewers to discover online content, a solid SEO strategy involves optimizing your web application and maintaining good performance. As more than 92% of the internet searches happen on […]

Automating HTTP/S Redirects and certificate management at scale

Organizations today use many ways to drive traffic to their websites and applications. This is important for new feature launches, marketing campaigns, advertising, and so on. One common approach uses HTTP/S redirects, where you send a user from one domain, or Uniform Resource Locator (URL), to another. Redirects are incredibly useful tools when moving websites, […]