AWS Developer Associate (DVA-C01) Review Material – CloudFront

General

• Content Delivery Network (CDN)
• Protected by WAF, DDOS, Shield
• Origins:
  • S3
  • HTTP Endpoints
• Has Geo Restriction
  • Whitelist
  • Blacklist
• Has Caching Policy
  • Defines the TTL
• HTTPS:
  • Viewer Protocol Policy – Use HTTPS or redirect HTTP to HTTPS
  • Origin Protocol Policy
    • HTTPS only
    • Match Viewer (i.e. HTTP -> HTTP or HTTPS -> HTTPS)
• Signed-URL/Signed-Cookie
  • 2 signers:
    • root (using CloudFront key pair)
    • trusted user group
• Pricing
  • 3 Price Class
    1. All
    2. 200 – Most regions but exclude expensive
    3. 100 – Only the least expensive
• Multiple-Origin
  • Based on path
  • Origin group
    • Primary
    • Secondary
• Field Level Encryption
  1. Specify the field to encrypt in POST (up to 10)
  2. Specify the asymmetric key (public key)