AWS Global Infrastructure Explained: Regions, Availability Zones, and Edge
The AWS global infrastructure is the physical foundation everything else in this exam sits on: dozens of Regions around the world, each containing multiple isolated Availability Zones, plus hundreds of edge locations that bring content and connections closer to users. CLF-C02 tests whether you can keep these layers straight — what a Region is versus an Availability Zone versus an edge location, why architects deploy across multiple Availability Zones (high availability), and why they sometimes go further and use multiple Regions (disaster recovery, business continuity, low latency for global users, and data sovereignty). You also need to recognize two extensions of that infrastructure by name: AWS Local Zones and AWS Wavelength Zones. This lesson covers the full scope of Task 3.2, including the relationships among the layers, the fact that Availability Zones do not share single points of failure, and the edge services — Amazon CloudFront and AWS Global Accelerator — that make the exam's edge-location questions predictable.
On this page8 sections
- The three layers: Regions, Availability Zones, and edge locations
- Inside an Availability Zone: no shared single points of failure
- High availability: why you deploy across multiple Availability Zones
- When to use multiple Regions: DR, business continuity, latency, sovereignty
- Edge locations: CloudFront and Global Accelerator
- Extending the infrastructure: Local Zones, Wavelength Zones, and Outposts
- Comparison table: Region vs AZ vs edge location vs Local Zone vs Wavelength Zone
- Scenario walkthrough: a global company with residency requirements
- Describe the relationships among AWS Regions, Availability Zones, and edge locations
- Explain how deploying across multiple Availability Zones achieves high availability
- State why Availability Zones do not share single points of failure
- Identify the four exam reasons to use multiple Regions: disaster recovery, business continuity, low latency for end users, and data sovereignty
- Describe at a high level how Amazon CloudFront and AWS Global Accelerator use edge locations
- Recognize AWS Local Zones and AWS Wavelength Zones and the latency problems each solves
The three layers: Regions, Availability Zones, and edge locations
AWS organizes its physical infrastructure into a clear hierarchy, and almost every question in this task statement comes down to placing something correctly within it. At the top sits the Region: a separate geographic area of the world — such as Northern Virginia, Frankfurt, or Singapore — where AWS clusters its data centers. There are dozens of Regions worldwide, and each one is designed to be isolated from the others. When you launch a resource, you choose the Region it lives in, and by default your data stays in that Region unless you deliberately move it. That single fact drives the data-sovereignty answers you will see later.
Inside every Region are multiple Availability Zones (AZs). An Availability Zone is one or more discrete data centers with independent power, cooling, and networking, located far enough apart within the Region that a local disaster affecting one AZ should not affect another. The AZs in a Region are connected to each other by high-bandwidth, low-latency private links, which is what lets you replicate data between them almost instantly and treat the Region as one logical place to build fault-tolerant applications.
The third layer is the edge: hundreds of edge locations spread across cities worldwide — far more numerous than Regions. Edge locations do not host your servers or databases the way a Region does. Instead, they bring specific capabilities physically closer to end users: caching copies of your content (Amazon CloudFront) and providing nearby entry points onto the AWS global network (AWS Global Accelerator).
Keep the mental model simple: Regions contain Availability Zones; edge locations sit outside that hierarchy, near users, in far greater numbers. When a question mentions a count in the "hundreds," it is describing edge locations, not Regions or AZs.
High availability: why you deploy across multiple Availability Zones
High availability means your application keeps serving users even when individual components fail. On AWS, the standard way to achieve it is to run your application in two or more Availability Zones within the same Region. Because the AZs fail independently, the probability that all of them fail at the same moment is dramatically lower than the probability that any one of them fails. If AZ A goes dark, the copies of your application running in AZ B and AZ C continue handling traffic, and users may never notice.
The low-latency links between AZs are what make this practical. You can keep a database synchronously replicated to a standby in another AZ, or spread identical web servers across three AZs behind a load balancer, without users experiencing any meaningful delay. Many AWS managed services offer a "Multi-AZ" option that does this replication and failover for you — at the Cloud Practitioner level you only need to recognize the pattern, not configure it.
Here is the boundary that CLF-C02 loves to test: multi-AZ protects you within a Region; it does not protect you from a Region-wide event, and it does not make your app faster for users on another continent. If a question's goal is "survive the failure of a single data center" or "keep the application available during an infrastructure failure," the answer is multiple Availability Zones. If the goal involves surviving a regional disaster, serving faraway users faster, or keeping data inside a specific country, you have left multi-AZ territory and entered multi-Region territory — the subject of the next section.
Memorize the one-liner: multiple AZs = high availability and fault tolerance inside one Region. Everything else in this task statement hangs off knowing when that answer stops being sufficient.
When to use multiple Regions: DR, business continuity, latency, sovereignty
Multi-AZ handles most failures, so why would anyone take on the extra cost and complexity of running in multiple Regions? The exam gives you exactly four reasons, and you should be able to match a scenario to the right one instantly.
1. Disaster recovery (DR). A Region is isolated, but it is still one geographic area. A large-scale regional disruption could affect every AZ in it. By keeping backups or a standby copy of your workload in a second Region, you can recover even if the primary Region becomes entirely unavailable. Scenario language: "recover from a regional outage," "maintain a copy of data in a geographically separate location."
2. Business continuity. Closely related to DR, this is about keeping the business operating — not just recovering data, but continuing to serve customers during a prolonged regional event. Some organizations run active workloads in two Regions simultaneously so that either can carry the load alone.
3. Low latency for end users. Physics does not negotiate: a user in Sydney talking to servers in Virginia crosses the planet on every request. Deploying your application in a Region near each major user population — one in Europe, one in Asia Pacific — cuts round-trip time and improves experience. Scenario language: "users in multiple continents complain about slow response times."
4. Data sovereignty (data residency). Laws or regulations may require that certain data physically remain within a country's borders. Because AWS does not move your data out of the Region you place it in unless you do so yourself, choosing a Region inside the required jurisdiction — and adding more Regions for other jurisdictions — is how you comply. Scenario language: "regulations require customer data to be stored within the country," "GDPR," "data residency requirement."
The classic trap pairs these against multi-AZ. Read the goal in the question stem: availability during component failure → multiple AZs; regional disaster, global users, or legal residency → multiple Regions.
Edge locations: CloudFront and Global Accelerator
Edge locations are AWS sites in hundreds of cities worldwide whose job is to be near users. The exam names two services that deliver the benefits of the edge, and it expects you to distinguish them at a high level.
Amazon CloudFront is AWS's content delivery network (CDN). It caches copies of your content — images, video, static web files, and API responses — at edge locations. When a user in Tokyo requests a file, CloudFront serves it from a nearby Tokyo edge cache instead of fetching it from your origin servers in, say, Ireland. The result is lower latency for users and less load on your origin. Exam trigger words: cache, content delivery, CDN, static content, video streaming, "deliver content with low latency to global users."
AWS Global Accelerator also uses edge locations, but it solves a different problem: instead of caching content, it gives your application static entry points that on-ramp user traffic onto the AWS global private network at the nearest edge location. From there, traffic rides AWS's own backbone — rather than the unpredictable public internet — to your application in whatever Region it runs. It works for any TCP or UDP application, including non-cacheable ones such as gaming, VoIP, or APIs. Exam trigger words: static IP addresses, improve performance and availability of the application itself, route users over the AWS network, TCP/UDP traffic.
The recognition-level distinction: CloudFront caches your content at the edge; Global Accelerator carries your traffic from the edge to your application over AWS's network. Both reduce latency for global users, both live at edge locations, and neither requires you to deploy your application into additional Regions. (Amazon Route 53, AWS's DNS service, also answers queries from edge infrastructure — a one-line fact worth recognizing, with the service itself covered under networking.)
Extending the infrastructure: Local Zones, Wavelength Zones, and Outposts
Sometimes even the nearest Region is too far away for a workload's latency needs. AWS extends its infrastructure closer to users in ways the exam expects you to recognize by name and purpose — nothing deeper.
AWS Local Zones place AWS compute, storage, and select other services in or near large population, industry, and IT centers that are distant from a full Region — for example, a metro area whose nearest Region is hundreds of miles away. Applications that need single-digit-millisecond latency to users in that specific city — media rendering, real-time gaming, live video production — can run their latency-sensitive components in the Local Zone while the rest of the application stays in the parent Region. A Local Zone is an extension of a Region, managed through it, not a new Region of its own.
AWS Wavelength Zones embed AWS compute and storage inside telecommunications providers' 5G networks. Traffic from a 5G mobile device reaches the application without ever leaving the telecom network to traverse the public internet, achieving ultra-low latency for mobile and connected-device use cases such as autonomous vehicles, AR/VR, and real-time mobile gaming. If the question says 5G, mobile edge, or telecom carrier network, the answer is Wavelength.
One more family member deserves a single line for contrast: AWS Outposts brings AWS infrastructure and services onto your own premises — your data center — for workloads that must stay on-site. Distinguish the three by where the hardware sits: Local Zone in a metro area near users, Wavelength inside a 5G carrier's network, Outposts in your own building. All three are extensions of AWS infrastructure; none is a Region or an Availability Zone, and none is an edge location in the CloudFront sense.
Comparison table: Region vs AZ vs edge location vs Local Zone vs Wavelength Zone
Use this table as your final review. Most Task 3.2 questions are answered by identifying which row the scenario describes.
| Infrastructure component | What it is | Purpose | Exam trigger |
|---|---|---|---|
| Region | A separate geographic area of the world containing multiple isolated Availability Zones; dozens exist globally | Where you choose to deploy resources; the boundary your data stays within unless you move it | "Geographic area," disaster recovery, data sovereignty, serving users on another continent |
| Availability Zone | One or more discrete data centers with independent power, cooling, and networking; multiple per Region, connected by low-latency links | Fault isolation inside a Region — build high availability by running in two or more | "High availability," "fault tolerance," surviving a data center failure, no shared single point of failure |
| Edge location | One of hundreds of sites in cities worldwide — far more numerous than Regions | Serve users nearby: CloudFront caches content; Global Accelerator on-ramps traffic onto the AWS network | "Cache," "CDN," "content delivery," "hundreds of locations," low latency without new Regions |
| Local Zone | An extension of a Region placing compute and storage in a large population or industry center | Single-digit-millisecond latency for users in a specific metro area far from a Region | "Single-digit millisecond," a named city, latency-sensitive local workloads |
| Wavelength Zone | AWS compute and storage embedded within a telecom provider's 5G network | Ultra-low latency for mobile and connected devices without traffic leaving the carrier network | "5G," "mobile edge," "telecom network" |
Two clarifications the table compresses. First, edge locations, Local Zones, and Wavelength Zones all reduce latency, but by different means: edge locations serve content and connections, while Local Zones and Wavelength Zones actually run your compute closer to users. Second, only Regions and AZs form the core deployment hierarchy — the others extend it toward the user.
Scenario walkthrough: a global company with residency requirements
Pull everything together with a realistic scenario of the kind CLF-C02 presents. A retail company serves customers in the European Union and across Asia Pacific. EU regulations require that EU customer data remain within the EU. Customers in both markets expect fast page loads, and leadership wants the platform to survive both a data-center failure and a full regional outage.
Work the requirements one at a time. Data sovereignty: EU customer data must stay in the EU, so the company deploys its EU workload and databases in an EU Region — data placed there will not leave unless the company moves it. Low latency for APAC users: serving Asia Pacific from Europe would mean slow, intercontinental round trips, so a second deployment goes into an Asia Pacific Region near those customers. Two Regions, two of the four multi-Region reasons already satisfied.
High availability: within each Region, the application runs across multiple Availability Zones behind load balancing, with the database replicated to a standby in another AZ. A failure of any single AZ — a power event, a network fault — is absorbed without downtime, because AZs do not share single points of failure. Disaster recovery and business continuity: each Region keeps backups replicated to the other (with the EU data's DR copy remaining inside an EU Region to preserve residency), so even a Region-wide disruption does not end the business.
Finally, static content — product images, scripts, marketing video — is served through CloudFront, cached at hundreds of edge locations so a shopper in Singapore or Stockholm gets content from a nearby cache rather than a distant origin. Notice the division of labor: AZs for availability, Regions for sovereignty/latency/DR, the edge for content delivery. If you can decompose a scenario this way, you can answer any question this task statement produces.
Tip. CLF-C02 probes this task in three predictable ways. First, pure identification: you are given a definition or a count ("geographic area," "one or more discrete data centers," "hundreds of sites worldwide") and must name Region, Availability Zone, or edge location. Second, the multi-AZ versus multi-Region trap: read the goal in the stem — surviving a component or data-center failure means multiple AZs, while disaster recovery, business continuity, low latency for distant users, or data sovereignty means multiple Regions. Third, edge and extension recognition: CloudFront (content caching) and Global Accelerator (edge on-ramp onto the AWS network) as the edge-location services, plus matching Local Zones to single-digit-millisecond metro latency and Wavelength Zones to 5G.
- A Region is a geographic area containing multiple isolated Availability Zones; an AZ is one or more discrete data centers with independent power, cooling, and networking.
- Availability Zones do not share single points of failure but are linked by low-latency connections — deploy across multiple AZs for high availability within a Region.
- Use multiple Regions for exactly four exam reasons: disaster recovery, business continuity, low latency for distant users, and data sovereignty.
- Data stays in the Region you put it in unless you move it — that is why Region choice answers data-residency questions.
- Edge locations number in the hundreds — far more than Regions — and serve users nearby rather than hosting your core workloads.
- CloudFront caches content at edge locations (CDN); Global Accelerator uses edge locations as static entry points onto the AWS global network for any TCP/UDP application.
- Local Zones extend a Region into a metro area for single-digit-millisecond latency; Wavelength Zones embed AWS inside telecom 5G networks; Outposts puts AWS hardware on your premises.
- Trap check: availability during component failure = multiple AZs; regional disaster, global users, or legal residency = multiple Regions.
Frequently asked questions
What is the difference between an AWS Region and an Availability Zone?
A Region is a separate geographic area of the world, such as Frankfurt or Singapore, where AWS clusters its infrastructure. An Availability Zone is a subdivision of a Region: one or more discrete data centers with independent power, cooling, and networking. Every Region contains multiple Availability Zones, physically separated so they do not share single points of failure but connected by low-latency links. You pick a Region for geography, compliance, and proximity to users; you spread workloads across its Availability Zones for high availability.
Why should I deploy my application across multiple Availability Zones?
Because Availability Zones fail independently. Each AZ has its own power, cooling, and networking, so an outage in one — a power event, a fire, a network fault — does not affect the others. Running your application in two or more AZs, typically behind a load balancer with data replicated between zones, means users keep being served when a single AZ goes down. This is the standard AWS pattern for high availability, and the low-latency links between AZs make cross-zone replication fast enough for real-time use.
When should a company use multiple AWS Regions instead of just multiple AZs?
Use multiple Regions when multi-AZ cannot meet the requirement: disaster recovery and business continuity (surviving an event that disrupts an entire Region), low latency for users on other continents (deploying near each user population), and data sovereignty (keeping data inside a legally required jurisdiction). Multi-AZ only protects you within one Region and does not make an application faster for faraway users. If the requirement is simply tolerating a data-center failure, multiple Availability Zones are sufficient and simpler.
What are AWS edge locations used for?
Edge locations are hundreds of AWS sites in cities worldwide — far more numerous than Regions — that bring capabilities closer to end users. Amazon CloudFront uses them to cache content such as images, video, and static files, so users download from a nearby cache instead of a distant origin. AWS Global Accelerator uses them as entry points that route user traffic onto the AWS global private network for any TCP or UDP application. Both reduce latency for global users without deploying your application into additional Regions.
What is the difference between CloudFront and Global Accelerator?
Both use AWS edge locations to speed things up for global users, but differently. CloudFront is a content delivery network: it caches copies of your content at the edge and serves them from the location nearest each user. Global Accelerator does not cache anything; it provides static IP addresses and on-ramps user traffic at the nearest edge location onto AWS's private global network, improving performance and availability for any TCP or UDP application, including dynamic, non-cacheable workloads like gaming or VoIP.
What are AWS Local Zones and Wavelength Zones?
Both extend AWS infrastructure closer to users than a Region. AWS Local Zones place compute and storage in large population and industry centers, giving applications single-digit-millisecond latency to users in that metro area; they are managed as extensions of a parent Region. AWS Wavelength Zones embed AWS compute and storage inside telecom providers' 5G networks, so traffic from mobile devices reaches the application without crossing the public internet — ideal for ultra-low-latency mobile use cases. For CLF-C02 you only need to recognize each by name and purpose.
Does AWS move my data between Regions automatically?
No. Data you store in an AWS Region stays in that Region unless you explicitly move or replicate it — AWS does not relocate it for you. This is the foundation of data sovereignty on AWS: to satisfy a legal requirement that data remain within a country or jurisdiction, you choose a Region located there. If you need copies elsewhere, for example for disaster recovery, you configure that replication yourself and remain in control of where every copy resides.
Sign up free to mark lessons complete, bookmark topics and track your exam readiness.