LambdaEdge

In this lesson, we explore two powerful services offered by AWS—CloudFront functions and Lambda@Edge—that enable you to run code at Amazon CloudFront edge locations. These services allow you to process requests and modify responses right at the edge, reducing the delay caused by routing traffic back to your origin servers.

With these functions, developers can manipulate incoming requests and outgoing responses. For example, you could implement basic authentication, perform authorization checks, or even generate an entire response directly at the edge. This capability brings complex backend logic closer to users, thereby reducing latency and improving performance.

When Do These Functions Run?

It is crucial to understand that CloudFront functions and Lambda@Edge functions are designed for different scenarios. Here’s when each type executes:

• CloudFront Functions run:

  • Immediately when a viewer sends a request to an edge location.
  • Just before CloudFront returns a response to the viewer.

• Lambda@Edge Functions run:

  • When CloudFront receives a request from a viewer.
  • When CloudFront forwards a request to the origin, especially for content not cached at the edge.
  • When a response is received from the origin, before delivering it back to the viewer.

Use Cases and Choosing the Right Service

CloudFront Functions

CloudFront functions are perfect for lightweight, short-running tasks. Common use cases include:

• Cache Key Normalization: Transform HTTP request attributes to create an optimal cache key, which improves the cache hit ratio.
• Header Manipulation: Insert, modify, or delete HTTP headers in requests or responses. For instance, you might add a header with the true client IP.
• URL Redirects or Rewrites: Redirect viewers based on request details or rewrite URLs. This allows for dynamic request management.
• Request Authorization: Inspect authorization headers or metadata to validate tokens like JSON Web Tokens (JWT).

Lambda@Edge Functions

Lambda@Edge functions are ideal for scenarios that require extended execution times or additional capabilities, such as:

• Running operations that take several milliseconds or more.
• Handling tasks with adjustable CPU and memory configurations.
• Integrating with other AWS services using third-party libraries like the AWS SDK.
• Performing functions that depend on network access to external services.
• Accessing the request body or file system when needed.

A detailed comparison chart below outlines the differences between CloudFront functions and Lambda@Edge. This chart covers programming languages, event triggers, scaling, function duration, and capabilities like network and file system access.

Summary

Both Lambda@Edge and CloudFront functions allow you to run code as close to your users as possible at the edge. They provide flexible options for manipulating requests and responses in Amazon CloudFront:

• CloudFront Functions: Best for lightweight tasks such as header manipulation, URL redirects/rewrites, and authorization on sub-millisecond executions.
• Lambda@Edge Functions: Suitable for operations requiring extended execution times, network or file system access, and deeper integrations with other AWS services.

Understanding the differences between these two services is essential for selecting the right approach for your specific use case. For more detailed information, explore the AWS Documentation.

Happy building at the edge!