Day 08 – AWS Global Infrastructure – The Ultimate Guide

The CyberSec Guru

AWS Global Infrastructure

If you like this post, then please share it:

Buy me A Coffee!

Support The CyberSec Guru’s Mission

🔐 Fuel the cybersecurity crusade by buying me a coffee! Why your support matters: Zero paywalls: Keep the content 100% free for learners worldwide, Writeup Access: Get complete writeup access within 12 hours of machine drop along with scripts and commands.

“Your coffee keeps the servers running and the knowledge flowing in our fight against cybercrime.”☕ Support My Work

Buy Me a Coffee Button

Welcome to Day 8 of your AWS 30-Day Roadmap.

We have spent the last week inside the console. We built servers (EC2), created users (IAM), and mounted hard drives (EBS). We have been looking at the “Micro” view of the cloud.

Today, we switch to the Macro view.

AWS is not just a website. It is the largest physical machine mankind has ever built. It is a network of millions of servers, thousands of miles of fiber optic cable, and massive power plants spanning the entire globe.

Understanding the AWS Global Infrastructure is critical. It dictates your speed (latency), your safety (disaster recovery), and your compliance (law). In this ultimate guide, we will peel back the curtain and explain how the internet actually works.

The Three Layers of the Cloud

When beginners look at AWS, they see “The Cloud.” When experts look at AWS, they see three distinct physical layers:

  1. Regions: The geographic cities where the data lives.
  2. Availability Zones (AZs): The physical data centers inside those cities.
  3. Edge Locations: The delivery network that brings data to your doorstep.

Let’s dissect them one by one.

AWS Global Infrastructure Hierarchy
AWS Global Infrastructure Hierarchy

Regions (The Cities)

A Region is a physical location in the world where AWS clusters its data centers.

  • Examples: us-east-1 (Northern Virginia), eu-west-2 (London), ap-northeast-1 (Tokyo).
  • Isolation: Each Region is completely independent. If the “Tokyo” region is hit by an earthquake and goes offline, the “London” region keeps running as if nothing happened.
  • Data Sovereignty: Data never leaves a region without your permission. If you store customer data in the eu-central-1 (Frankfurt) region, it stays in Germany. This is critical for legal compliance (GDPR).

How to Choose a Region?

This is a common interview question. “Which region should I pick?”

  1. Latency: Pick the region closest to your users. If your customers are in India, use ap-south-1 (Mumbai), not us-east-1.
  2. Price: Not all regions cost the same. Brazil (sa-east-1) is often 50% more expensive than Virginia due to taxes and electricity costs.
  3. Service Availability: New services (like Amazon Bedrock AI) usually launch in Virginia (us-east-1) first. Smaller regions may wait months to get them.
  4. Compliance: If your government requires data to stay in-country, you must pick that region.
Map of AWS Regions
Map of AWS Regions

Availability Zones (The Data Centers)

This is the most misunderstood concept in AWS.

An Availability Zone (AZ) is one or more discrete data centers with redundant power, networking, and connectivity in an AWS Region.

  • The Codes: They are named with a letter: us-east-1a, us-east-1b, us-east-1c.
  • The Distance: AZs are physically separated by miles (typically 10-60 miles).
    • Why? They are close enough to have low latency (single digit milliseconds) but far enough that a flood, fire, or tornado hitting AZ-A will probably miss AZ-B.
  • The Interconnect: All AZs in a region are connected by high-bandwidth, low-latency encrypted fiber networking.

The “Multi-AZ” Strategy

This is the secret to never going offline.

  • Bad Architecture: Launching one big EC2 server in us-east-1a. If that data center loses power, your website is down.
  • Good Architecture: Launching two small servers: one in us-east-1a and one in us-east-1b. If “1a” goes down, “1b” keeps working. This is called High Availability.
The "Multi-AZ" Strategy of AWS
The “Multi-AZ” Strategy of AWS

Edge Locations (The Delivery Network)

While there are only ~30 Regions, there are 400+ Edge Locations.

  • What are they? Small data centers located in major cities around the world (e.g., Miami, Manila, Warsaw, Perth).
  • The Service: They are used primarily by Amazon CloudFront (Content Delivery Network).
  • How it works:
    1. You host your website in the Virginia Region (us-east-1).
    2. A user in Australia visits your site.
    3. Instead of traveling all the way to Virginia (slow), the video is cached in the Perth Edge Location.
    4. The user downloads it from Perth (fast).
  • Local Zones & Wavelength:
    • Local Zones: Like “Mini-Regions” for ultra-low latency (e.g., LA Local Zone for movie rendering).
    • Wavelength: AWS hardware installed inside Verizon/Vodafone 5G towers for mobile gaming speeds.
With vs Without Edge
With vs Without Edge

The AWS Global Network (The Backbone)

How do the Regions talk to each other? via the public internet? NO.

AWS owns the largest private network in the world. They have laid thousands of miles of trans-oceanic cables under the Atlantic and Pacific oceans.

  • The Benefit: When you move data from us-east-1 (Virginia) to eu-west-1 (Ireland), your data flows on Amazon’s private cables, not the public internet.
  • Result: It is faster, more secure, and cheaper than using the public web.

Hands-On Lab (Latency Test)

Let’s prove that geography matters.

Step 1: CloudPing.info

  1. Open a browser tab to https://www.cloudping.info.
  2. Click HTTP Ping.
  3. Look at the results.
  4. Analyze:
    • Find the region closest to you. The time should be low (e.g., 20ms).
    • Find a region on the other side of the world. The time will be high (e.g., 250ms).
    • Lesson: This “Latency” is why we pick specific regions.

Step 2: The Console Check

  1. Log into the AWS Console.
  2. Click the Region Dropdown (top right).
  3. Notice which regions are “Enabled” and which are “Disabled” (some regions like Hong Kong or Bahrain require opt-in to prevent accidental spending).

Conclusion & Summary

You now have a mental map of the AWS planet.

Key Takeaways:

  1. Region: A collection of AZs. Choose based on Latency and Law.
  2. AZ: A physical data center. Use Multi-AZ for safety.
  3. Edge Location: A caching site. Use for speed.
  4. Global Network: AWS’s private internet.

Tomorrow, on Day 9, we are going to combine Day 5 (EC2) and Day 8 (Infrastructure). We will learn about Auto Scaling and Load Balancing. We will build a fleet of servers that grow and shrink automatically based on traffic.

The world is your infrastructure.

Buy me A Coffee!

Support The CyberSec Guru’s Mission

🔐 Fuel the cybersecurity crusade by buying me a coffee! Your contribution powers free tutorials, hands-on labs, and security resources.

Why your support matters:
  • Writeup Access: Get complete writeup access within 24 hours
  • Zero paywalls: Keep the content 100% free for learners worldwide

Perks for one-time supporters:
☕️ $5: Shoutout in Buy Me a Coffee
🛡️ $8: Fast-track Access to Live Webinars
💻 $10: Vote on future tutorial topics + exclusive AMA access

“Your coffee keeps the servers running and the knowledge flowing in our fight against cybercrime.”☕ Support My Work

Buy Me a Coffee Button

If you like this post, then please share it:

AWS 101

Discover more from The CyberSec Guru

Subscribe to get the latest posts sent to your email!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Discover more from The CyberSec Guru

Subscribe now to keep reading and get access to the full archive.

Continue reading