SYSTEM Cited by 2 sources

Amazon CloudFront

Amazon CloudFront is AWS's global content delivery network — edge locations cache + serve HTTP(S) content to end users with low latency, offer DDoS protection + TLS termination + Lambda@Edge compute at the edge. Commonly paired with Route 53 DNS + WAF for the web application security baseline.

Stub — expand as dedicated sources arrive.

Architectural shape: CDN in front of single-write-region origin

The canonical CloudFront + S3 pattern: objects live in one authoritative S3 region; CloudFront caches popular objects at edge locations for fast reads anywhere. This is the shape Fly.io's Tigris announcement contrasts itself against — "AWS agrees, which is why they have a SKU for it, called CloudFront, which will, at some variably metered expense, optimize the read side of a single-write-region bucket" — i.e. a read-side optimisation for an otherwise-regional origin, not a globally distributed storage plane. Compare and contrast with systems/tigris and the patterns/metadata-db-plus-object-cache-tier shape.

Seen in

• sources/2026-04-01-aws-automate-safety-monitoring-with-computer-vision-and-generative-ai — distributes the React web application for the AWS safety- monitoring solution; paired with AppSync GraphQL API behind it + Route 53 DNS + WAF for common web-vulnerability protection.
• sources/2024-02-15-flyio-globally-distributed-object-storage-with-tigris — explicitly cited as the incumbent architectural shape Tigris is not — a caching CDN over a single-write-region bucket, quoted as the two-hour baseline Tigris undercuts on setup time and outperforms architecturally. Useful wiki data point: CloudFront's role in the AWS stack is as the read-side-optimisation SKU, not a globally distributed storage plane.