DEV307AdvancedDeveloper Tools Playbook 2 live updates

Active-Active Global Architecture with CloudFront and Route 53

What this session is about

In this lightning talk, we'll walk through a real-world architectural pattern used in production: combining AWS CloudFront with Route 53 latency-based routing to make your ECS-backed services truly global. Starting with the problem of slow response times for APAC users, we'll build up a practical active-active architecture step by step. You'll see how CloudFront sits in front of your regional ALBs, how WAF is woven into the design from the start rather than bolted on later, and why getting your domain configuration right — distinguishing between your ALB origin domain and your public-facing CloudFront alternate domain — is critical to making this pattern work correctly.

Playbook

Editorial commentary · what to actually do about this on Monday

The concept
CloudFront in front of regional ALBs. Route 53 latency-based routing. ECS-backed services made truly global. WAF designed in from the start.
Why it matters
Global users demand sub-200ms responses. Single-region architectures don't deliver.
The hard parts
Domain configuration. Distinguishing the ALB origin domain from the public-facing CloudFront alternate domain. Easy to misconfigure.
Playbook moves
(1) Build the domain map explicitly — write it down. (2) Test failover before launch. (3) Use staging that mirrors prod's DNS structure exactly.
The surprise
WAF retrofit costs are 2–3× WAF design-from-day-one costs. The "we'll add security later" pattern is more expensive than building it in. Don't defer. ---

Independent editorial perspective — not an official AWS or speaker statement. Designed for executives evaluating what to brief their teams on next.