Amazon Route 53 provides DNS configuration. AWS WAF is a web application firewall that protects AEM against common web exploits. Amazon CloudFront is a fast content delivery network (CDN) that speeds up distribution of static and dynamic web content. AWS Certificate Manager (ACM) to provision, manage, and deploy public and private SSL certificates required for AEM. Internet-facing Application Load Balancer distributes traffic to AEM dispatcher instances across multiple Availability Zones. AEM dispatcher installed on Amazon Elastic Compute Cloud (Amazon EC2) instance is an Apache httpd-based static webserver that provides caching, load balancing, and application security. Amazon Elastic Block Store (Amazon EBS) I/O optimized volumes are recommended. Each dispatcher instance is mapped to a publish instance in 1:1 fashion in each Availability Zone. AWS Lambda provides scaling logic in response to scale up/down events to pair/unpair dispatcher-publish instances, update the replication agent (reverse replication, if applicable) between author-publish, and update AEM content health check alarms. AEM publish is an AEM installation on Amazon EC2 that serves published content to public. Publish always uses TarMK as a node store. Amazon Simple Storage Service (Amazon S3) is the preferred shared datastore for binary content for AEM publish and author instances. Use VPC endpoint to provide private access to Amazon S3 from author and publish instances. AEM author is an AEM installation on Amazon EC2 used to author content and administer the website. TarMK (on Amazon EBS I/O optimized disk) is the preferred node store for performance. MongoDB node store is for scalability (multiple author instances to handle 100+ concurrent authors). AEM author cold standby for high availability. AWS Lambda can be used to automate the failover logic. AEM replication agent on author replicates the tar files to the standby instance. Optional: Author-dispatcher instances on Amazon EC2 improve authoring performance. AWS Lambda provides scaling logic for author-dispatcher similar to dispatcherpublish scaling logic. Author dispatcher has caching disabled.
