AWS Application Networking

At AWS, security is a top priority. While AWS takes care of securing the hardware and physical infrastructure used to route your applications' data, you are responsible for defining access to those applications. Application networking security is a subset of your overarching security posture that focuses on three primary areas: internet connectivity, cross-account access, and improved security within your accounts. To simplify securing your applications, AWS provides policy-based authentication and authorization, automated certification creation, and faster key rotation as part of a portfolio of managed application networking services. Use AWS application networking services to secure ingress and egress to your application with layered encryption, logically defined boundaries, and permissions enforced through context-rich authorization and authentication.

AWS application networking services provide you with the flexibility to build your applications how you want, with native support for AWS and the third-party vendors you use today. Whether you are a networking administrator or a service developer, AWS has tailor-made managed networking services to support your preferred mode of compute (EC2, containers/Kubernetes, serverless, etc.), and networking protocols (HTTP(S), gRPC, WebSocket, TLS, UDP, TCP, IP, etc.). Choose how much, or how little, you want to offload security, connectivity, and translation work from your application with options to fully run your application in EC2, offload load balancing using ELB, or get fully managed application networking service support with Amazon VPC Lattice.

AWS builds and manages application networking services and physical infrastructure, so you don’t have to. For the last 17 years, our engineers have focused on innovation and continuously improving our services, so that we can provide the world’s most reliable global cloud infrastructure. This has led to us creating robust services and custom hardware that help you more easily build applications, scale elastically, and reduce costs. Our application networking services offer a 99.99% multi-AZ deployment SLAs and 99.9% single AZ SLAs. You can use these services to further improve your applications’ availability by pre-configuring how you want your applications to recover in different failure modes, such as bad application deployments. AWS application networking services offer options for both automatic recovery or customizable remediation using manual features.

Setup a standardized view across your application network stack with consistent metrics and logs. AWS logs provide granular detail into each service, including specific user actions, if your application allowed or denied a user, HTTP codes, traffic volume, and request latency. AWS application networking services work with an extensive ecosystem of internal tools and external vendors, like Splunk and DataDog, to help give insight and visibility into what is happening within your applications across both north-south and east-west traffic patterns. Use networking specific AWS tools like: VPC Flow Logs for monitoring the IP traffic across your architecture and Network Access Analyzer to identify unintended network access to resources in an Amazon VPC. You can then setup monitoring and observability pipelines using Amazon CloudWatch, AWS CloudTrail, and Amazon Kinesis Data Firehose.