Networking & Content Delivery
Category: Networking & Content Delivery
Migrate Amazon CloudFront public origins to private VPC origins
Introduction This post demonstrates how to migrate your Amazon CloudFront public origins to Amazon Virtual Private Cloud (Amazon VPC) origins using different strategies. You can also use VPC origins with cross-accounts to support security-first architectures. When designing network architecture for CloudFront workloads, organizations must choose between centralized or distributed models. In a centralized architecture, a […]
Demystifying Amazon VPC peering charges
In this post, we walk you through how to identify and analyze the newly separated intra-region VPC Peering charges using Amazon Web Services (AWS) Billing and Cost Management console tools including AWS Cost Explorer, AWS Data Exports (Standard data export and Legacy AWS Cost and Usage Reports (CUR) export) and AWS Bills, showing you the […]
How Betsson Services Limited elevated AWS hybrid connectivity to new heights with AWS Cloud WAN
Betsson Services Limited (or Betsson Group) is a leading global sports betting and gaming operator, delivering entertainment to millions of players through more than 20 award-winning brands, including its flagship brand, Betsson. With a proprietary technology stack and a diverse product offering, Betsson serves customers both directly (B2C) and indirectly (B2B). At Betsson, our vision […]
Using cross-account CloudFront VPC origins for multi-account private API Gateway architecture
In November 2025, Amazon CloudFront introduced cross-account support for Virtual Private Cloud (VPC) origins, which allows you to keep Amazon VPC origins and CloudFront distributions in separate Amazon Web Services (AWS) accounts. In turn, organizations with multi-account strategies can use VPC origins while maintaining their desired account structure. This enables a new architectural pattern for […]
AWS Load Balancer Controller adds general availability support for Kubernetes Gateway API
AWS recently announced the general availability of Amazon Web Services (AWS) Load Balancer Controller support for Kubernetes Gateway API. Previously, AWS Load Balancer Controller satisfied Kubernetes Ingress and Service resource requirements by provisioning Application Load Balancer (ALB) and Network Load Balancer (NLB) respectively. With this new capability, you can now define your AWS load balancing […]
Using AWS Edge to optimize object uploads to Amazon S3
Amazon S3 is a highly scalable, secure, and durable object storage service that offers industry-leading performance and availability. It’s widely used to store a variety of unstructured data such as images, videos, backups, and logs. However, when uploading data to Amazon S3, especially large files or data accessed from different Amazon Web Services (AWS) Regions, […]
Implementing secure file uploads to Amazon S3 at the edge: Choosing the right pattern
Uploading files to Amazon Simple Storage Service (Amazon S3) is a common requirement for modern applications. Although the concept is clear, there are several ways to implement S3 uploads, each with distinct trade-offs in security, user experience, and scalability. Understanding these patterns and their best-fit scenarios is essential for making informed architectural decisions that align […]
Adding HTTP security headers using Amazon CloudFront
This post is written for web developers, DevOps engineers, and security professionals who want to strengthen their application security posture without complex implementations. HTTP security headers represent a critical yet often overlooked layer of defense that can protect your users from common web vulnerabilities such as cross-site scripting (XSS), clickjacking, and man-in-the-middle attacks. They are […]
Implementing dynamic origin modification in Amazon CloudFront – Part 2
In part one of this post, we introduced two methods, Amazon CloudFront Functions and Lambda@Edge, for executing custom code at CloudFront edge Locations to modify request origins dynamically. This second post provides step-by-step setup instructions and code samples for implementing the two approaches for a subscription-based routing use case: CloudFront Functions with query string parameters […]
Understanding dynamic origin modification in Amazon CloudFront – Part 1
In the modern digital landscape, our lives are inescapably dominated by screens and browsers. From global product launches to flash sales and virtual concerts, events that once drew crowds to physical venues now drive millions of users to digital platforms simultaneously. The rapid rise of digital-first experiences has made the need to dynamically adjust content […]









