Networking & Edge

Build the network: VPC, CloudFront, Route 53, Transit Gateway.

5 sessions at the summit4 external resources

Overview

AWS networking starts with Amazon VPC — your own virtual network with subnets, route tables, security groups, and gateways. AWS Transit Gateway connects thousands of VPCs and on-prem networks. AWS Cloud WAN gives a global, policy-driven backbone. At the edge, Amazon CloudFront (450+ POPs) delivers content with CloudFront Functions and Lambda@Edge for compute. Amazon VPC Lattice provides application-layer service-to-service connectivity across accounts and VPCs without complex peering.

Key concepts

  1. VPC design: subnetting, public vs. private, NAT, gateway types
  2. Hybrid: Direct Connect, Site-to-Site VPN, Cloud WAN
  3. CloudFront, AWS Global Accelerator, Route 53 routing policies
  4. Service connectivity: PrivateLink, VPC Lattice, App Mesh
  5. AWS WAF, Shield, and Network Firewall for security at the edge

Key AWS services

  • Amazon VPC
  • Amazon CloudFront
  • AWS Transit Gateway
  • AWS Cloud WAN
  • Amazon VPC Lattice
  • AWS PrivateLink

Learn more — curated resources

Hand-picked official docs, foundational papers, and the best community guides for going deeper on this topic.

Sessions on this topic

5 sessions from the Summit covered this topic. Each is a self-contained mini-lesson.

  1. DEV204Intermediate

    AI-Powered EKS Troubleshooting with AWS DevOps Agent

    Managing EKS clusters means correlating logs, metrics, IAM policies, and network configurations under pressure. The AWS DevOps Agent, announced at re:Invent 2025, changes this workflow fundamentally. In this session, you'll watch a live demonstration where the DevOps Agent autonomously investigates an EKS service failuretracing issues from Pod logs through VPC Security Groups without manual intervention. You'll learn how the agent correlates cross-service dependencies, generates verified remediation plans, and integrates into existing SRE workflows.

  2. ARC401Expert

    The Art of Managing Trade-Offs for your Network Design with Megaport

    Every network design decision involves careful trade-off considerations. In this session, master the art of making critical network design decisions through real-world scenarios that showcase Megaport's innovative NaaS platform for AWS connectivity. Learn how to evaluate key trade-offs between centralized and distributed architectures while balancing security, performance, and cost requirements. Explore how Megaport's on-demand bandwidth, private connectivity to AWS Direct Connect, and multi-cloud capabilities transform network design decisions. Whether you're building a global network, managing multi-account environments, or implementing hybrid connectivity to on-premises locations, attendees will leave with actionable insights and practical decision-making tools to optimize network infrastructure architecture designs with Megaport and AWS

  3. DEV307Advanced

    Active-Active Global Architecture with CloudFront and Route 53

    In this lightning talk, we'll walk through a real-world architectural pattern used in production: combining AWS CloudFront with Route 53 latency-based routing to make your ECS-backed services truly global. Starting with the problem of slow response times for APAC users, we'll build up a practical active-active architecture step by step. You'll see how CloudFront sits in front of your regional ALBs, how WAF is woven into the design from the start rather than bolted on later, and why getting your domain configuration right — distinguishing between your ALB origin domain and your public-facing CloudFront alternate domain — is critical to making this pattern work correctly.

  4. IDE102Foundational

    Power of Possibility: Leading Through Innovation and Connection

    As AI reshapes every industry, professionals across all roles and backgrounds are navigating an unprecedented pace of changebringing new opportunities but also rising burnout, blurred boundaries, and pressure to continuously adapt. This moment of disruption presents a powerful opportunity to not only deliver innovation but to redesign how we lead, build culture, and sustain meaningful careers in more equitable ways. Join accomplished AWS leaders and peers for this immersive session that combines strategic leadership frameworks, emotional intelligence, and interactive roundtable discussion to accelerate your impact in tech. Together, we will explore practical strategies for claiming visible technical leadership, activating professional networks, setting sustainable boundaries in hybrid work, and championing responsible AI adoption without amplifying existing inequalities. Participants will share lived experiences, tactics that worked and lessons learned, and build meaningful connections through guided speed networking in a collaborative, supportive environment. This session empowers professionals from all backgrounds, with particular focus on amplifying diverse voices and fostering inclusive innovation. Leave with actionable strategies to strengthen your leadership presence, leverage emotional intelligence as a career accelerator, build psychologically safe and inclusive team environments, and navigate the challenges shaping your future in tech.

  5. ISV204Intermediate

    AWS Networking Fundamentals: Connect, secure and scale

    Dive into AWS networking fundamentals. Learn essential skills configuring your network in a single region before scaling to global, multi-Region architectures. In this session, explore various VPC connectivity methods, hybrid network integration, and secure traffic management techniques. Whether new to AWS or wanting to expand networking building blocks, this session delivers practical insights into best practices and proven architecture patterns for establishing global connectivity.

Non-obvious insights

From the Playbook

One sharp, contrarian insight per session — the things teams don't think of unprompted.

Agents are best at the boring 80% of incidents. The hard 20% they'll fumble — that's where humans still win. So measure success on *time-to-page-the-human*, not on full autoresolution. The agent's job is to short-circuit the easy stuff and hand off cleanly when it's stuck. ---DEV204 — AI-Powered EKS Troubleshooting with AWS DevOps Agent
WAF retrofit costs are 2–3× WAF design-from-day-one costs. The "we'll add security later" pattern is more expensive than building it in. Don't defer. ---DEV307 — Active-Active Global Architecture with CloudFront an…
AI's biggest org-design risk is amplifying existing inequalities. The engineers already best at "managing up" benefit most from AI assistance; the ones who could most benefit may be the slowest to adopt. Plan for equity in adoption explicitly — it doesn't happen on its own. ---IDE102 — Power of Possibility: Leading Through Innovation and…
The most expensive networking mistake at scale is data transfer costs you didn't plan for. NAT gateway egress, cross-AZ traffic, inter-region replication add up surprisingly fast. Cost-model your traffic *before* architecting; reverse-engineering is brutal. ---ISV204 — AWS Networking Fundamentals: Connect, secure and scale