Networking and Content Delivery
CoreAmazon CloudFront
Global content delivery network and reverse proxy for cacheable HTTP content, dynamic acceleration, origin protection, and edge security integrations.
Key points
- Cache keys, TTLs, headers, cookies, and query strings determine cache efficiency and correctness.
- CloudFront can reduce origin load and transfer while improving user latency, but uncacheable traffic still reaches origins.
- Use origin access controls, TLS, WAF, and Shield integrations to preserve the intended edge security boundary.
Best-known use cases
- Deliver static S3 assets globally.
- Accelerate and protect web/API origins through the AWS edge.
What candidates often confuse it with
- CloudFront caches/proxies HTTP traffic; Global Accelerator carries supported TCP/UDP without caching.
- CloudFront delivers traffic; Route 53 returns DNS routing answers.
Key takeaway
Choose CloudFront when HTTP edge proxying, caching, or origin protection is the key requirement.
Related services
- Amazon S3
- AWS WAF
- AWS Shield
- Amazon Route 53
Relevant exam tasks
- D2.1
- D3.4
- D4.4