Networking & Content Delivery
AWS secures internet routing with RPKI plus security checks
In our previous post on demystifying AWS Data Transfer services, we briefly explained how AWS is designed from its foundation to be the most secure way for our users to run their workloads in the cloud. In this post, we build on that and focus on how AWS has the largest implementation1 of Resource Public […]
Simplify hybrid inspection using AWS Cloud WAN service insertion
Organizations face the complex challenge when managing and securing networks across multiple AWS Regions, cloud environments, and on-premises locations. AWS Cloud WAN helps users manage distributed networks through a unified approach. The service streamlines network management by providing a single network policy framework, segmentation capabilities, dynamic route propagation, and monitoring through a centralized dashboard. AWS […]
Visualizing network performance of your AWS Cloud workloads with Network Flow Monitor
AWS launched Network Flow Monitor at re:Invent on December 1st, 2024, a new Amazon CloudWatch Network Monitoring feature that offers network performance monitoring across AWS managed services. With Network Flow Monitor, you can get near real-time visibility into network traffic between compute resources (Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Elastic Kubernetes Service (Amazon […]
Streamlining network deployments using AWS Cloud Control
Introduction In today’s multi-cloud landscape, organizations face significant challenges in network configuration and resource management. Traditional tools often need deep, tool-specific knowledge, which leads to increased deployment times and configuration errors. The AWS Cloud Control API addresses these common cloud management challenges by providing a unified, language-agnostic interface for resource management. It offers immediate access […]
Simplify ALB’s public IP address assignment with VPC IPAM
Application Load Balancer (ALB) operates at layer-7 of the OSI model and allows you to load balance HTTP and HTTPS requests to its backend targets. In March 2025, we launched ALB and Amazon VPC IP Address Manager (IPAM) integration that allows you to use predictable IP address blocks for your internet-facing ALBs. This feature helps […]
Simplifying Egress Inspection with AWS Cloud WAN Service Insertion for Greenfield Deployments
AWS Cloud WAN is a managed wide area networking (WAN) service that helps you build, manage, and monitor a unified global network connecting cloud and on-premises resources. In 2024, we launched service insertion, an AWS Cloud WAN feature that streamlines integrating security and inspection services into global networks. Using AWS Network Manager console or JSON policies, […]
Exploring Data Transfer Costs for AWS Network Load Balancers
In this post, we explore how Amazon Elastic Compute Cloud (Amazon EC2) data transfer costs apply to the communication between Network Load Balancer (NLB), clients, and targets in multiple scenarios, to help you optimize data transfer costs on Amazon Web Services (AWS). For Classic and Application load balancers, visit our post, Exploring Data Transfer Costs […]
Securing your web applications and optimizing their performance with AWS Application Load Balancer
Are you interested in securing your web applications and optimizing their performance to maintain a seamless user experience and safeguard against cyber threats? Application Load Balancers (ALBs) provide a powerful feature for modifying request and response headers, allowing you to fine-tune your application’s behavior in numerous ways. From bolstering security with essential headers such as […]
Using Amazon Route 53 Resolver DNS Firewall to detect malicious domains
In this post, we show how organizations can use Amazon Route 53 Resolver DNS Firewall to detect and block access to malicious domains. We show how you can use the Amazon Web Services (AWS) Managed Domain Lists, which contain domains associated with malicious activity or potential threats, and share best practices for implementing Route 53 […]
Building Resilient IPv6 Network with SD-WANs and AWS Cloud WAN Connect with GRE
In this post we explore how you can use AWS Cloud WAN Connect with Generic Routing Encapsulation (GRE) Tunnels and Multi-protocol BGP (MP-BGP) for Equal Cost Multi-Path (ECMP) routing of IPv6 networks. We also cover route verification and failover testing best practices. Many Amazon Web Services (AWS) users are increasingly adopting IPv6 and Software-Defined Wide […]