AWS re:Invent 2025 - Streaming at Scale: Advanced Media Delivery with Amazon CloudFront (NET307)

Delivering Streaming Content at Scale: Advanced Media Delivery with Amazon CloudFront

Observability and Monitoring

• Importance of observability and monitoring for large-scale streaming events
• Use of CloudWatch dashboards to track key metrics like exit errors, video start failures, and rebuffering
• Leveraging real-time access logs via Amazon Kinesis to enable real-time monitoring and analytics
• Utilizing S3 access logs and Athena for post-event analysis and troubleshooting
• Integrating CMCD (Common Media Client Data) to combine client-side and CDN-side data for comprehensive observability

Security and Content Protection

• Challenges of securing content delivery, including unauthorized access, content theft, and geographic restrictions
• Leveraging CloudFront's built-in geo-restrictions and AWS WAF for IP-based and VPN/proxy blocking
• Using CloudFront Functions for advanced token-based authentication and content protection
• Securing the origin by using signed URLs, VPC origins, and origin access control
• Implementing a comprehensive security solution using the AWS Security at the Edge offering

Scaling and Resilience

• Importance of scaling and resilience for large-scale streaming events
• Leveraging AWS Elemental Media Services (Media Connect, Media Live, Media Package) for managed media workflows
• Implementing multi-region architectures with seamless cross-region failover using time code synchronization and Media Quality Aware Resiliency (MQA)
• Benefits of using managed services to offload infrastructure management and focus on delivering the best viewer experience

Contribution and Ingest

• Ensuring reliable and secure contribution feeds into the cloud
• Using AWS Direct Connect for consistent, high-bandwidth, and private contribution
• Leveraging AWS Elemental Media Connect for secure ingest, including support for encryption protocols like SRT and Zixi
• Monitoring ingest quality metrics like ARQ recovery, dropped packets, and other SRT-specific metrics

Monetization and Dynamic Ad Insertion

• Challenges of implementing dynamic ad insertion at scale
• Importance of scaling the origin server to handle personalized manifest requests
• Leveraging AWS Elemental Media Tailor for server-side ad insertion with features like ad prefetching and staggered ad server requests
• Considerations for integrating ad platforms and DRM providers with the streaming workflow

Key Takeaways

• Comprehensive observability and monitoring are critical for delivering successful large-scale streaming events
• Layered security approach is necessary to protect content and enforce access control
• Managed services and multi-region architectures can improve scalability, resilience, and viewer experience
• Reliable and secure contribution feeds are essential for the overall success of the streaming workflow
• Dynamic ad insertion requires careful planning to ensure the origin server can handle the increased load and personalization

Real-World Examples and Impact

• Case study of Nessen, a regional sports network, leveraging AWS services to deliver high-quality, low-latency streams for live sports events
• Nessen's use of AWS Elemental Media Services, CloudFront, and other AWS offerings to scale seamlessly, protect media rights, and gain real-time insights