SUMMARY

Cache-Control max-age lets you specify how long (in seconds) that you want an object to remain in the cache before CloudFront gets the object again from the origin serve.
If you get anInsufficient instance capacityerror, try submitting a new request for instance after a few minutes.
Enhanced networking provides many features, such as: higher bandwidth, higher packet per second (PPS) performance, and consistently lower inter-instance latencies.
Use InnoDB as the storage engine for your MySQL database and also partition your large tables so that file sizes are under the 16 TiB limit.
Aurora Replicas = Milliseconds Asynchronous Replication.
RDS Read Replicas = Seconds Asynchronous Replication.
Kinesis Data Streams = Can set a Lambda function as a destination.
Kinesis Data Firehose = Cannot set a Lambda function as a destination.
You can do VPC Peering across AWS regions.
To optimize costs, you should use Multi-AZ only for very important tiers, for example not development or test.
If you want to force SSL, use the rds.force_ssl parameter and you can also download the RDS Root CA certificate and import the certificate to your servers and configure your application to use SSL to encrypt the connection to RDS.
There are several ways of identity federation in AWS:
- Web identity federation - Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
- Cognito - Preferred way of web identity federation because it does a lot of the work for you.
- Custom identity broker - When you manually set it up because your identity store is not compatible with SAML 2.0.
- SAML 2.0 - An open federation standard that allows an identity provider (IdP) to authenticate users and pass identity and security information about them to a service provider (SP).
- Active Directory Federation Services (AD FS) - It authenticates the user against Active Directory and temporary credentials are returned using STS AssumeRoleWithSAML.
To enable internet access in a VPC, you need to create an internet gateway (IG) and attach it to your VPC. Then add a route to the route table that directs internet-bound traffic to the internet gateway.
An endpoint group routes requests to one or more registered endpoints in Global Accelerator.

PreviousEndpoint groups for standard accelerators in Global Accelerator NextSQS FIFO + SWF

Last updated 4 years ago

Was this helpful?

SUMMARY

Cache-Control max-age lets you specify how long (in seconds) that you want an object to remain in the cache before CloudFront gets the object again from the origin serve.
If you get anInsufficient instance capacityerror, try submitting a new request for instance after a few minutes.
Enhanced networking provides many features, such as: higher bandwidth, higher packet per second (PPS) performance, and consistently lower inter-instance latencies.
Use InnoDB as the storage engine for your MySQL database and also partition your large tables so that file sizes are under the 16 TiB limit.
Aurora Replicas = Milliseconds Asynchronous Replication.
RDS Read Replicas = Seconds Asynchronous Replication.
Kinesis Data Streams = Can set a Lambda function as a destination.
Kinesis Data Firehose = Cannot set a Lambda function as a destination.
You can do VPC Peering across AWS regions.
To optimize costs, you should use Multi-AZ only for very important tiers, for example not development or test.
If you want to force SSL, use the rds.force_ssl parameter and you can also download the RDS Root CA certificate and import the certificate to your servers and configure your application to use SSL to encrypt the connection to RDS.
There are several ways of identity federation in AWS:
- Web identity federation - Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
- Cognito - Preferred way of web identity federation because it does a lot of the work for you.
- Custom identity broker - When you manually set it up because your identity store is not compatible with SAML 2.0.
- SAML 2.0 - An open federation standard that allows an identity provider (IdP) to authenticate users and pass identity and security information about them to a service provider (SP).
- Active Directory Federation Services (AD FS) - It authenticates the user against Active Directory and temporary credentials are returned using STS AssumeRoleWithSAML.
To enable internet access in a VPC, you need to create an internet gateway (IG) and attach it to your VPC. Then add a route to the route table that directs internet-bound traffic to the internet gateway.
An endpoint group routes requests to one or more registered endpoints in Global Accelerator.

PreviousEndpoint groups for standard accelerators in Global Accelerator NextSQS FIFO + SWF

Last updated 4 years ago

Was this helpful?