What is CloudFront?
- Its a Content Delivery Network
- Improves read peformance, content is cached at the edge.
- Improve user experience.
- Made up of 216 Points of Presence (PoP) globally and other Edge Locations.
- DDoS protection (because worldwide), integration with shield, AWS web App Firewall.
CloudFront - Origins (HTTP Backend)
- S3 bucket: For distributed file & caching at the edge.
- Enhanced Security with CloudFront Origin Access Controll (OAC)
- CloudFront can be used as ingress (i.e. to upload S3 files)

CloudFront vs S3 Cross-Origin replication
CloudFront
- Global Edge Network
- Files are cached for a TimeToLive (TTL) [eg. Maybe a day]
- Great for static content that must be available everywhere.
S3 Cross Region Replication
- Must be setup for each region, you want replication to happen
- Files are updated in real-TimeToLive
- Files are read-only
- Great for dynamic content that needs to be available at low latency in few regions.
Increase the transfer speed by transfering the file to an AWS Location which will forward the data to the S3 bucket in the target Region!