Networking & Delivery

Amazon Route 53 is a highly available and scalable cloud DNS web service, making it suitable for managing DNS records.

AWS Direct Connect (Option A) provides a dedicated, physical network connection from an on-premises facility to AWS, bypassing the public internet to reduce costs and increase bandwidth throughput. AWS Site-to-Site VPN (Option E) establishes a secure, encrypted IPsec tunnel over the public internet, making it ideal as a quick-to-deploy backup. Client VPN is for individual user devices, while Transit Gateway and VPC Peering are primarily for inter-VPC routing.

Failover Routing in Amazon Route 53 allows traffic to be routed to a backup resource if the primary resource fails a health check, ensuring high availability.

Latency Routing in Amazon Route 53 directs users to the AWS Region with the lowest network latency, ensuring the fastest response time.

An Internet Gateway is used to connect a VPC to the internet, enabling internet access for resources within the VPC.

Amazon CloudFront is a CDN that caches static and dynamic content at Edge Locations worldwide, heavily reducing latency by serving requests closer to the user (Option B). Because traffic enters the AWS network at the edge, CloudFront provides built-in, seamless DDoS protection via integration with AWS Shield Standard (Option E). CloudFront does not scale EC2 instances (Auto Scaling does), store transactional data (Databases do), or provide physical fiber connections (Direct Connect does).

An Internet Gateway provides bidirectional internet access for instances in public subnets, allowing them to communicate with the internet.

Health Checks in Amazon Route 53 monitor the health of application endpoints and can redirect traffic away from unhealthy resources.