AWS Networking and Content Delivery

AWS monitoring tools detect unusual activity and identify security issues such as Distributed Denial of Service (DDoS) attacks, Man in the Middle (MITM) attacks, IP Spoofing, or Port Scanning. AWS also supports more security certifications and compliance programs than any other provider.

Amazon Virtual Private Cloud (Amazon VPC) isolates your network resources and protects data with encrypted interconnectivity. AWS Site-to-Site VPN establishes encrypted sessions with IP Security (IPsec) and Transport Layer Security (TLS) tunnels. AWS Direct Connect lets you create a private connection that reaches your on-premises environment and the cloud. AWS PrivateLink privately connects your network to cloud services and SaaS solutions without exposing any of that traffic over the public internet.

Our approach is fundamentally different. Each region is fully isolated and within each region we have built availability zones (AZ) that are fully isolated partitions of our infrastructure. To better isolate any issues and achieve high availability, you can partition applications across multiple AZs in the same region. Each AZ has its own power infrastructure and is connected with a fast, private fiber-optic network.

We also uniquely design our services into smaller cells that scale out within a region. This reduces the blast radius of a cell-level failure. This is why AWS, unlike other cloud provider, has never experienced a network event that spanned multiple regions.

Our consistently high performance is delivered by the Nitro system that offloads many traditional virtualization functions. Our dedicated hardware delivers higher performance, higher availability, lower jitter, and consistently lower instance-to-instance latency than any other cloud provider.

With our new C5n and P3dn instances, we are also the only cloud provider with compute instances that deliver 100 Gbps of networking throughput. Our superior networking performance is one of the reasons why more high performance computing (HPC) and machine learning workloads run on AWS than anywhere else.

AWS has built the largest global network that spans 66 availability zones, covers 21 regions, and provides 180 points of presence connected by 100 Gbps trans-oceanic cables.

With 89 AWS Direct Connect locations, over 23% more locations and twice as many connectivity partners than any other provider, AWS provides the broadest geographic coverage for creating a secure connection between AWS and an on-premises network.

We are the only cloud provider with a Transit Gateway, that simplifies routing between thousands of VPCs and your on-premises network.

AWS is also the only provider with a Global Accelerator, which provides higher performance and availability for global applications. It ensures that each user connects to the closest AWS Point-of-Presence (PoP) and routes the application traffic over AWS’s high performance global network.

AWS networking services and features are deeply integrated with Amazon CloudWatch, which provides detailed visibility on networking and application performance.