AWS CDN service that sits in front of the Rails application as a proxy. Has an optional feature that enriches every proxied request with headers describing the originating client — IP address, geo location, latitude/longitude, etc. Used in the Prevent Account Sharing talk to record this information on login sessions, though in practice geolocation accuracy turned out to be lower than expected.