AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-12-10 · Documentation low

File: wellarchitected/latest/games-industry-lens/container-based-backend.md

Summary

Entire content of the container-based backend documentation was removed, including architecture diagrams, service descriptions, and security features.

Security assessment

The change removes documentation entirely without any mention of security vulnerabilities, weaknesses, or incidents. While the removed content described security features (Shield Advanced, WAF), the deletion itself doesn't address a specific security issue nor add new security documentation.

Diff

diff --git a/wellarchitected/latest/games-industry-lens/container-based-backend.md b/wellarchitected/latest/games-industry-lens/container-based-backend.md
index a0931a6ae..8b1378917 100644
--- a//wellarchitected/latest/games-industry-lens/container-based-backend.md
+++ b//wellarchitected/latest/games-industry-lens/container-based-backend.md
@@ -1 +0,0 @@
-[](/pdfs/wellarchitected/latest/games-industry-lens/games-industry-lens.pdf#container-based-backend "Open PDF")
@@ -3,46 +1,0 @@
-[Documentation](/index.html)[AWS Well-Architected](https://aws.amazon.com/architecture/well-architected/)[AWS Well-Architected Framework](games-industry-lens.html)
-
-# Container-based game backend architecture
-
-This section outlines a container-based game backend architecture
-
-![Reference architecture diagram showing how to host a game backend using containers.](/images/wellarchitected/latest/games-industry-lens/images/container_based_game_backend.jpg)
-
-_Hosting a game backend using containers_
-
-  1. Players access the game using game client software, which can be distributed to them through a gaming platform, a digital storefront, or a direct download from a content delivery network (CDN), such as **Amazon CloudFront**. CDNs provide caching at edge locations to accelerate the performance for users downloading content. For example, CloudFront can be used to distribute the game client software to your players as well as the game assets and other content. 
-
-  2. **Global Accelerator** provides traffic acceleration and customizable controls for routing traffic from player game clients to your load balancers as well as routing traffic across Regions for multi-Region and failover purposes. The custom domain names for your game backend REST APIs are configured in Route 53 to route traffic to Global Accelerator endpoints. **Shield Advanced** provides DDoS mitigation for your accelerator and game backend. 
-
-  3. NAT Gateway and Application Load Balancer are deployed to public subnets in each of the Availability Zones used by the game backend to help ensure high availability with the Region. **Web Application Firewall** is deployed on the Application Load Balancer to provide layer-7 web traffic filtering. 
-
-  4. The game backend is hosted as a collection of individual container-based microservices deployed into an **Amazon EKS** cluster in private subnets spread across Availability Zones for resiliency. Automatic scaling dynamically adjusts the capacity of the services and cluster nodes based on resource utilization, which is typically correlated with player demand. Whereas **Cluster Autoscaler** automatically adjusts the number of nodes in the cluster, the **Horizontal Pod Autoscaler** automatically scales the pods deployed into the cluster. 
-
-  5. Game and player data is stored in backend databases and caches that are deployed into private subnets across Availability Zones with replication between primary and replica nodes. **Aurora** is a popular choice for use cases such as player profiles, entitlements, and in-game purchasing, which can have more complex querying requirements and may benefit from the relational data modeling capabilities of MySQL and PostgreSQL. **ElastiCache for Redis** is useful for building high-performance leaderboards, pub/sub messaging, and for caching frequently accessed data to reduce latency and load on databases. **DynamoDB** is a fully managed NoSQL data store that is ideal for unpredictable access patterns and the ability to scale to virtually unlimited throughput for use cases such as player and game state data, session data, inventory and item stores, or use cases where you want a global database with minimal overhead. 
-
-  6. Asynchronous processing workflows should be used to perform work that can be done in the background, such as updating leaderboards or sending friend requests. Configure your game backend to push this type of work into **Amazon SQS** queues to help you scale as your game grows, or consider using **Amazon SNS** topics to distribute the work between many consumer application queues for parallel processing. Use **Lambda functions** to perform the processing in an event-driven manner to reduce your compute infrastructure costs and management overhead. For workflows that are long-lived or require task coordination with multiple steps, consider orchestrating the entire workflow using **Step Functions**. **Amazon EventBridge** can be used to initiate functions to respond to AWS service and custom application events. 
-
-
-
-
-![Warning](https://d1ge0kk1l5kms0.cloudfront.net/images/G/01/webservices/console/warning.png) **Javascript is disabled or is unavailable in your browser.**
-
-To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.
-
-[Document Conventions](/general/latest/gr/docconventions.html)
-
-Game backends
-
-Serverless-based
-
-Did this page help you? - Yes
-
-Thanks for letting us know we're doing a good job!
-
-If you've got a moment, please tell us what we did right so we can do more of it.
-
-Did this page help you? - No
-
-Thanks for letting us know this page needs work. We're sorry we let you down.
-
-If you've got a moment, please tell us how we can make the documentation better.