Multi-region expansion analysis — cost comparison, DynamoDB Global Tables setup, Lambda@Edge trade-offs, compliance matrix, and latency estimates.
💰 Cost Comparison: us-east-1 vs eu-west-1
🇺🇸 us-east-1 — Current baseline
~$12–18/moLambda (500K inv)$0.60
DynamoDB PAY_PER_REQUEST$4.50
CloudFront CDN$2.00
API Gateway$1.75
S3 storage$0.50
🇪🇺 eu-west-1 — Replica estimate
~$16–24/moLambda (500K inv, +10% pricing)$0.66
DDB Global Tables replication WCU+$2.50
CloudFront EU PoP$2.40
API Gateway eu-west-1$1.93
Cross-region data transfer~$1.50
Estimates assume identical traffic profile. DynamoDB Global Tables adds ~$1.875 per million WCUs replicated. Actual billing depends on traffic pattern and AWS promotional pricing.
🗄 DynamoDB Global Tables Setup
4 CLI commands to enable Global Tables replication to eu-west-1:
# 1. Verify table exists in us-east-1 (must be PAY_PER_REQUEST or provisioned with streams)
aws dynamodb describe-table --table-name eggs --region us-east-1
# 2. Enable DynamoDB Streams on each table (required for Global Tables)
aws dynamodb update-table --table-name eggs --region us-east-1 \
--stream-specification StreamEnabled=true,StreamViewType=NEW_AND_OLD_IMAGES
# 3. Create replica in eu-west-1 (repeat per table)
aws dynamodb update-table --table-name eggs --region us-east-1 \
--replica-updates '[{"Create":{"RegionName":"eu-west-1"}}]'
# 4. Verify replication status
aws dynamodb describe-table --table-name eggs --region us-east-1 \
--query 'Table.Replicas'
⚠ Global Tables v2 requires streams. Repeat step 2–3 for all tables: eggs, ducklings, spaceducks, birth_certificates, connections, audit_log.
⚡ Lambda@Edge vs Regional Lambda Trade-offs
| Factor | Lambda@Edge | Regional Lambda (eu-west-1) |
|---|---|---|
| Execution location | CloudFront PoP (150+ locations) | Fixed AWS region |
| Cold start latency | Higher — no VPC, but per-PoP cold starts | Lower — warm pools per region |
| Max memory | 128 MB (viewer) / 10 GB (origin) | 10 GB |
| Max timeout | 5s (viewer) / 30s (origin) | 15 min |
| VPC access | ❌ Not supported | ✅ Full VPC support |
| DynamoDB access | Via API only (no SDK VPC endpoint) | Direct SDK + VPC endpoint |
| Pricing | $0.60/M requests + duration | Standard Lambda pricing |
| Best for Space Duck | Auth redirects, A/B testing, geo-routing | Beak API, peck protocol, data ops |
| Recommendation | Partial — edge routing only | Primary for Beak API |
🛡 Data Residency Compliance Matrix
| Regulation | Applies to | us-east-1 Only | eu-west-1 Replica | Notes |
|---|---|---|---|---|
| GDPR | EU users' personal data | ⚠ At risk | ✓ Compliant | EU personal data must stay in EU (or explicit consent). Current us-east-1 may not satisfy Art. 44-49 SCCs without DPA. |
| CCPA | California residents | ✓ OK | ✓ OK | CCPA focuses on disclosure/deletion rights, not geographic storage. Both regions are acceptable. |
| APRA | Australian entities | ⚠ Review needed | ⚠ Review needed | CPS 234 requires risk assessment for offshore data. Neither us-east-1 nor eu-west-1 meets APRA's offshore notification threshold without a written risk acceptance. |
| ISO 27001 | All data | ✓ AWS certified | ✓ AWS certified | AWS eu-west-1 is ISO 27001:2022 certified. Operator must maintain their own controls. |
⏱ Estimated Latency Improvement
London (UK) → us-east-1 (current)~85–120ms RTT
London (UK) → eu-west-1 Dublin (proposed)~12–25ms RTT
Paris (FR) → us-east-1~95–130ms RTT
Paris (FR) → eu-west-1~18–35ms RTT
Sydney (AU) → us-east-1~200–240ms RTT
Sydney (AU) → ap-southeast-2 (future)~15–30ms RTT
EU region latency gain~75–100ms improvement per request
RTT estimates are typical values. Actual latency depends on user ISP, CloudFront PoP selection, and Lambda cold-start frequency. Beak API calls and peck protocol handshakes benefit most.