AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.
Networking & Content Delivery
Recent questions
see all- Hi everyone, I have 2 requester-managed VPC endpoints in eu-west-3 (Paris) that I cannot delete. They were created by an old AWS Copilot/ECS application that has since been fully deleted (CloudForma...
- I'm building a tool that reads a serverless application's call graph and recommends which Lambda functions could be merged into a single deployment. Part of the cost model prices the data that flows b...
- I am testing the new Gateway Load Balancer TCP Reset feature (announced 2026-09-02) but cannot get a TCP Reset to fire on target unhealthy. The CloudWatch metric TCP_ELB_Reset_Count (AWS/GatewayELB) s...
- Automation is necessary for a service as large as Amazon SES, but Production Access should still represent a meaningful trust decision. If an account can receive access almost immediately without clea...
- Creating a CloudFront distribution fails with "Your account must be verified before you can add new CloudFront resources." Account is active, billing is fine, other services have been running on it fo...
- Hello AWS Team, I am currently blocked from creating a new CloudFront distribution due to an AccessDenied exception: "Your account must be verified before you can add new CloudFront resources." I ope...
- Hello AWS Support team, My AWS account is active and its billing information is valid, but creating an Amazon CloudFront distribution is blocked with this exact error: "Your account must be verified...
- I have a BGP Site-to-Site VPN between an AWS Transit Gateway and an Azure VPN Gateway (VNG) running active-active. Everything routes fine, but when I check on the AWS side, the VPN connection shows **...
- I am trying to activate a custom domain on AWS Amplify Hosting. The Amplify-generated CNAME has been added to my DNS provider, and a public DNS lookup confirms that the hostname resolves to the exact...
- Hello, In Route53 I have a domain with `Failover` routing policy. For `Secondary ` route I have a CloudFront distribution. I'm trying to create another CloudFront distribution for `Primary` route, t...
- The Alexa.Authorization.AcceptGrant directive includes an authorization code for LWA which my server code needs to exchange for access and refresh tokens. The token endpoint for is https://api dot am...
- I'm running a Node.js/NestJS app on ECS Fargate (`awsvpc` network mode) connecting to RDS PostgreSQL in the same VPC. On a **genuinely fresh task's first boot**, my app makes two DB queries concurrent...
- I'm leading a cloud migration from on-prem and my network engineer is insisting that all the AWS VPC cidr blocks get tracked in his on-prem IPAM. I'm using AWS IPAM with a pool per region to automatic...
- Hello AWS team, I am looking for guidance regarding my suspended AWS account. My account was suspended pending identity and payment verification. I submitted all requested verification documents fo...
- We have a centralized inspection setup all inter-VPC traffic goes through Network Firewall via TGW route tables. Works fine but we're inspecting way too much. Internal service-to-service calls betwee...
- Region: ap-south-1 I have a CloudFormation stack (managed via CDK) that updates an AWS::RDS::DBProxy resource. A recent update triggered a rollback (due to an unrelated cross-stack export dependency)...
- We are considering using the CloudFront Business flat-rate pricing plan. According to the AWS documentation, automatic email notifications are sent when usage reaches 50%, 80%, and 100% of the monthly...
- I am building an IVR-first Amazon Connect deployment that uses an external voice transfer connector to hand calls to a SIP endpoint outside Connect. The SIP signalling and RTP media should not travers...
Recent Knowledge Center content
see allRecent articles
see allDouniaEXPERT
published 20 hours ago0 votes22 views
When I click Save & Test on an Amazon CloudWatch data source in an Amazon Managed Grafana (AMG) workspace attached to a VPC, the request returns `504 Gateway Timeout`David FowlerEXPERT
published 6 days ago0 votes103 views
Diagnose and fix intermittent long-lived-session drops that appear when you enable a second Local Gateway BGP peer on AWS Outposts behind a stateful firewall. The cause is an asymmetric return path; t...published 8 days ago0 votes45 views
Privately reach Amazon Bedrock AgentCore (Runtime and Memory) from a self-hosted EKS agent authenticated with IRSA/SigV4, inside a no-egress VPC. Covers the AWS STS interface endpoint and regional STS...Lucky IkaniSUPPORT ENGINEER
published a month ago3 votes267 views
I want to use multiple AWS Client VPN endpoints in different AWS accounts with the same Microsoft Entra ID (Azure AD) tenant for SAML authentication. When I create a second enterprise application in E...PeterEXPERT
published a month ago1 votes119 views
Demonstrates how to configure DNS Firewall rules in a Route 53 Global Resolver DNS View to block malicious domains using custom domain lists, AWS managed lists, and DGA advanced threat detection, with...Lucky IkaniSUPPORT ENGINEER
published a month ago5 votes310 views
I created a cross-account AWS Transit Gateway VPC attachment and it was accepted, but the attachment transitioned to a "failed" state instead of "available."Lucky IkaniSUPPORT ENGINEER
published a month ago4 votes474 views
I want to use AWS CloudTrail to determine what configuration changes were made to my AWS Transit Gateway, such as route modifications, attachment changes, or propagation updates.Nate LeeSUPPORT ENGINEER
published a month ago2 votes265 views
Step-by-step guide to enable VPN BGP Logging on AWS Site-to-Site VPN, verify logs in CloudWatch, set up AWS DevOps Agent, and use natural language to analyze BGP session issues automatically.lfroilanEXPERT
published a month ago0 votes102 views
A systematic troubleshooting guide for AWS Data Transfer Terminal, covering physical layer connectivity, DHCP/network issues, and S3 transfer failures. Helps customers diagnose problems on-site during...Selim SkhiriEXPERT
published a month ago2 votes162 views
Amazon EKS prefix delegation and EKS Auto Mode assign /28 prefixes (16 contiguous addresses) to worker nodes instead of individual IP addresses. A subnet can report plenty of free addresses and still ...VatsalEXPERT
published a month ago1 votes469 views
This article provides a complete guide to AWS Transit Gateway Policy-Based Routing (PBR) — a new feature enabling traffic forwarding decisions based on source/destination IP, ports, and protocol inste...- AWS OFFICIALUpdated a month ago0 votes130 viewsThis article explains the domain name dispute resolution process and the options that are available to you for domain names that you register through Amazon Route 53.
H_ShahEXPERT
published a month ago4 votes185 views
This article presents a cost-optimization pattern using a dedicated AWS Direct Connect gateway with private virtual interfaces to bypass Transit Gateway for bulk storage traffic, while preserving the ...Nikhil BhagatEXPERT
published a month ago0 votes242 views
This article compares the costs of seven common AWS networking architecture patterns against Amazon VPC Lattice alternatives. Each comparison includes detailed cost breakdowns with public pricing assu...Derek ZiehlEXPERT
published 2 months ago1 votes118 views
Customers evaluating the CloudFront Security Savings Bundle often ask whether activating mid-month means losing the discount on usage already incurred that month, or whether they should wait until the...Rodrigo ReyesSUPPORT ENGINEER
published 2 months ago0 votes132 views
Organizations using multi-account architectures often need Private Hosted Zones (PHZs) owned by different AWS accounts to be resolvable through a centralized Route 53 Global Resolver. Since June 24, 2...Tirth ParekhEXPERT
published 2 months ago2 votes295 views
AWS NAT Gateway now supports two availability modes: Zonal (the original, single-AZ model) and Regional (a newer mode that automatically spans Availability Zones). With the addition of Regional mode i...Puneet AroraEXPERT
published 2 months ago0 votes220 views
Organizations planning workload migrations to AWS often underestimate the foundational work required before the first server moves. A well-architected multi-account landing zone is a prerequisite that...
Recent selections
see allAWS OfficialEXPERT
published 7 months ago0 votes398 views
This spotlight on Amazon API Gateway equips you with the skills and troubleshooting tips to get the most out of a powerful service.AWS OfficialMODERATOR
published 8 months ago0 votes236 views
This spotlight on AWS Direct Connect equips you with the skills and troubleshooting tips to get the most out of this robust service.AWS OfficialMODERATOR
published 8 months ago0 votes216 views
This spotlight on AWS Transit Gateway equips you with the skills and troubleshooting tips to get the most out of a highly scalable service.AWS OfficialEXPERT
published a year ago0 votes496 views
This spotlight on Amazon Route 53 equips you with the skills and troubleshooting tips to get the most out of an internet routing service.AWS OfficialEXPERT
published a year ago0 votes442 views
This spotlight on Amazon CloudFront equips you with the skills and troubleshooting tips to get the most out of a powerful service.AWS OfficialEXPERT
published 2 years ago1 votes598 views
This spotlight on AWS Site-to-Site VPN equips you with the skills and troubleshooting tips to get the most out of a highly-available service.Henry Fuentes JrEXPERT
published 2 years ago1 votes905 views
This spotlight on Elastic Load Balancing (ELB) equips you with the skills and troubleshooting tips to get the most out of a fully-managed load balancing service.Isaac BehrensEXPERT
published 2 years ago3 votes6.3K views
Diagram that shows differences in VPN and Direct Connect connectivity.Osvaldo MarteEXPERT
published 2 years ago2 votes18.7K views
This selection focuses on the essential AWS networking services, providing a comprehensive overview of tools and technologies available to build and manage secure, scalable, and high-performing networ...Antonio LagrotteriaEXPERT
published 2 years ago4 votes28.4K views
A selection of architectural patterns and tips to leverage secure cross-account APIs, showing ingress, egress and inspection reference architecturesRiku_KobayashiEXPERT
published 3 years ago1 votes14.4K views
AWS has started charging for public IPv4 addresses from February 2024. I will summarize the documents for migrating from public IPv4 to IPv6.- AWS OFFICIALUpdated 3 years ago0 votes74 viewsBy combining Outposts Rack with Megaport, you will have simplified, scalable connectivity options based on your on-premises requirements, including private or public Direct Connect interconnection to ...
- AWS OFFICIALUpdated 3 years ago0 votes67 viewsAccelerate your business transformation goals with a managed service that combines compute, network and storage capabilities in a fully supported, ready-to-run service from VMware and AWS.
- AWS OFFICIALUpdated 3 years ago0 votes176 viewsAre you looking for smart network design for your on-premises network? Explore various forms of connectivity between on-premises data centers, remote sites, and AWS Cloud.
- AWS OFFICIALUpdated 3 years ago0 votes8.3K viewsAre you getting 403 Access Denied errors with your Amazon Simple Storage Service (Amazon S3) operations? Review this list of handpicked resources to identify the root cause and troubleshooting instruc...
- AWS OFFICIALUpdated 3 years ago1 votes2.9K viewsDo you need your web applications in one domain to interact with resources in a different domain? Review this curated Selection to learn how to configure CORS for your Amazon S3 bucket.
Riku_Kobayashi
EXPERTGary Mclean
EXPERTBrettski
EXPERTAntonio Lagrotteria
EXPERTUri Segev
EXPERTGiovanni Lauria
EXPERTOleksii Bebych
EXPERTFlorian Turnwald
EXPERTOsvaldo Marte
EXPERTIsaac Behrens
EXPERTAdeleke Adebowale .J.
EXPERTMikeLim
EXPERTTushar Jagdale
EXPERTMatt Barbieri
EXPERTAWS-User-alantam
EXPERTIndranil Banerjee AWS
EXPERTTakahito Iwasa
EXPERTMassimilianoAWS
EXPERT
