Skip to main content

CloudfrontDistribution



Resource Icon

Resource Overview

Amazon CloudFront accelerates the delivery of static and dynamic web content such as .html, .css, .php, images, and media files. When users request content, CloudFront delivers it through a global network of edge locations that provide low latency and high performance.

Associated Resources

Parent Resources

Connected Resources


Resource Configuration

Basic Settings

  • enabled : Whether the distribution is enabled - true, false
  • price_class : Pricing class for the CloudFront distribution - PriceClass_100, PriceClass_200, PriceClass_All
  • http_version : Maximum supported HTTP version - http1.1, http2
  • is_ipv6_enabled : Whether IPv6 is enabled - true, false
  • linked_waf_web_acl_name : Name of the WAF Web ACL used for security protection
  • tag : Tags used to categorize the resource

Origin Settings (origin)

  • origin.origin_type : Origin type - s3, custom
  • origin.linked_resource_name : S3 Bucket to associate when using an S3 origin
  • origin.domain : DNS domain name when using a custom origin
  • origin.shield_enabled : Whether Origin Shield is enabled - true, false
  • origin.shield_region : AWS region code for Origin Shield

Origin Group (origin_group)

  • origin_group.first_origin_name : First origin name
  • origin_group.second_origin_name : Second origin name
  • origin_group.failover_criteria : List of HTTP status codes for failover criteria

Cache Behavior (cache_behavior)

  • cache_behavior.path_pattern : Request path pattern to which the cache behavior applies
  • cache_behavior.compress : Whether automatic compression is enabled - true, false
  • cache_behavior.viewer_protocol_policy : Viewer protocol policy - allow-all, https-only, redirect-to-https
  • cache_behavior.allowed_methods : List of HTTP methods that CloudFront processes
  • cache_behavior.cached_methods : List of HTTP methods to cache
  • cache_behavior.origin_name : Origin name to forward requests to
  • cache_behavior.linked_cache_policy_name : Cache Policy to associate

Distribution Restrictions (restriction)

  • restriction.type : Geographic restriction type - whitelist, blacklist, none
  • restriction.locations : List of ISO 3166-1 alpha-2 country codes

Certificate Settings (viewer_certificate)

  • viewer_certificate.default_certificate_enabled : Whether to use the default CloudFront certificate
  • viewer_certificate.acm_certificate_name : Name of the ACM certificate to use
  • viewer_certificate.iam_certificate_id : IAM certificate ID to use
  • viewer_certificate.legacy_client_support_enabled : Whether legacy HTTPS clients are supported
  • viewer_certificate.minimum_protocol_version : Minimum SSL/TLS protocol version

Logging Settings (logging)

  • logging.logging_enabled : Whether access logging is enabled - true, false
  • logging.logging_s3_bucket_name : S3 Bucket used to store logs
  • logging.logging_file_prefix : Log file prefix
  • logging.logging_include_cookies : Whether cookies are included in logs - true, false

Tags

  • tag : Tags used to categorize the resource

References