StudyToCert

All certifications / Solutions Architect Associate / Lessons

AWS Certified Solutions Architect – Associate SAA-C03 · Domain 1: Design Secure Architectures

Protecting the edge: AWS WAF, Shield Standard vs Shield Advanced, and CloudFront with origin access control

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

The edge is where your application meets the internet, and it is the best place to stop bad traffic before it reaches your servers. AWS offers three services that work together there: AWS WAF for application-layer filtering, AWS Shield for distributed denial of service (DDoS) protection, and Amazon CloudFront, the content delivery network (CDN) that serves and filters traffic at a global network of edge locations. Understanding which layer each one covers lets you answer most edge-security questions quickly.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Solutions Architect Associate for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Solutions Architect Associate study plan