These two types of functions can be executed during the processing of incoming or outgoing requests in AWS, and are integrated within CloudFront.
lambda (Python, C#, Ruby, Java, rust, Go lang) execution time : 15 min max use layers Throttle error 429 512 Mo RAM max 1000 max in //
Access & Security Pre-signed URL: Temporary access (default 7 days). Bucket Policy: Controls access inside S3 (resource-based). Encryption: S3 encrypts every object by default, but no audit/rotation built-in. Data Access Features Byte-Range Fetch: Retrieve partial object (useful for large files). S3 Select: Query data within objects (CSV, JSON, Parquet). Costs & Storage Classes Cost hierarchy:…
Snow Family (Offline Data Transfer) Snowcone: Small device (~8 TB) → data transfer to S3/EC2. Snowball Edge: Larger device (~20–80 TB), with compute/storage options. Snowmobile: Truck-sized (up to 100 PB) for massive data migration. FSx (Managed File Systems) FSx for Windows Server: Supports AD integration, SQL Server, SMB protocol. ❌ No NFS. ✅ Multi-AZ. FSx…
User Pool: Provides built-in user management and authentication extensions. Identity Pool: Issues credentials and ephemeral identities for accessing AWS services. User Groups: Belonging to a group is optional. IAM Policy: Defined by version, ID, statement (with ID, effect, principal, action, resource). Certificate: Managed via AWS Certificate Manager. Cognito: Supports federated users (e.g., social or enterprise…
inesis (KDS, Firehose, Analytics) Kinesis Data Streams (KDS): Real-time data streaming; replayable up to 7 days. Kinesis Firehose: Delivers streaming data to S3, Redshift, or HTTP endpoints (fully managed, no storage). Kinesis Data Analytics: Real-time (RT) analytics on streaming data. EventBridge: Event bus that integrates AWS services with third-party apps. Autoscaling: Adjusts shard capacity automatically….
amplify web or mobile app WAF geographic restriction, before ALB, IP filter, pattern, limit request Road 53 100 % availability, smart routing routing policies SNI: service name, multiple @ geolocalisation dns suppport, dns host names firewall manager waf shield advanced SG route 53 network firewall VPC (SG)