Questions tagged [amazon-cloudfront]

Amazon CloudFront is a content delivery network (CDN) offered by Amazon Web Services.

Filter by
Sorted by
Tagged with
0
votes
1answer
27 views

Redirecting HTTPS -> HTTPS on AWS?

I have a static website w/ S3 + Route53 + Cloudfront set up. I am successfully able to do the following redirects: http://example.com -> https://example.com http://www.example.com -> https://example....
30
votes
2answers
21k views

Chrome S3 Cloudfront: No 'Access-Control-Allow-Origin' header on initial XHR request

I have a webpage (https://smartystreets.com/contact) that uses jQuery to load some SVG files from S3 through the CloudFront CDN. In Chrome I will open an Incognito window as well as the console. Then ...
0
votes
2answers
3k views

Misses in cloudfront CDN

I am a bit new to the world of CDN's. I am also running an internationa site, which we hope will one day have a lot of traffic, but for now trickles in. Site uses a image resizer behind a CDN to serve ...
0
votes
1answer
87 views

AWS CloudFront Traffic Not Reaching EC2 Instance

I've got an API app on EC2 that only knows HTTP, and it's listening on port 8080. Its code does not return 504 for any request. I need CloudFront to be an SSL-Terminating reverse proxy because the app ...
1
vote
1answer
1k views

Why CloudFront does not return Access-Control-Allow-Origin?

I'm trying to figure out why cloudfront distribution does not cache / send through access-control-allow-origin. When I curl my website: HTTP/1.1 200 OK Date: Sat, 03 Mar 2018 07:42:01 GMT Content-...
3
votes
1answer
2k views

openssl tool cannot get certificate from CloudFront, does anyone know why?

I'm writing a script to check the SSL expiry dates of all my domains. This works for my normal sites: echo | openssl s_client -connect $domain:443 2> /dev/null | openssl x509 -noout -enddate ...
3
votes
1answer
1k views

Does CloudFront support S3 signature version 4 for KMS encrypted objects?

I'm using Cloudfront with an S3 origin that is using KMS to encrypt objects. I'm getting the following error when sending a GET request for an object in the S3 bucket. Requests specifying Server ...
0
votes
0answers
16 views

Traffic handling capacity for 1 EC2 instance for t3.2xlarge [duplicate]

Protocol exchange between phone server and IOT device(inter regional). say there are 100000 users and each are requesting or using 12 - 20 times a day may be approximately at the same time(protocols ...
6
votes
1answer
1k views

Strict-Transport-Security on CloudFront with S3 origin?

My company's site has a static homepage for speed and cost reasons. We use S3 as the origin for CloudFront. Now, we would like to declare Strict-Transport-Security for the entire domain, but S3 seems ...
0
votes
1answer
44 views

How to route to Cloudfront+s3 and rest to ALB in Route53?

The project has a domain name foobar.com pointing to a legacy system, hosting and serving mainly static files. The project got more complex over time and in AWS ALB certain /routes are pointed to ...
0
votes
0answers
31 views

Same-Origin Policy : configuring CloudFront static content to communicate with dynamic backend?

I am currently hosting a static single-page web application with AWS CloudFront. I would like to add a backend service for my web ui/client to communicate with so that I can serve dynamic content. ...
2
votes
1answer
52 views

JSON file not rendering when served up from AWS Cloudfront

I have a static JSON formatted file called apple-app-site-association sitting at the root of my webapp (e.g. webapp.foo.bar/apple-app-site-association) which is served up via AWS CloudFront. When I ...
0
votes
1answer
28 views

Amazon CloudFront default SSL certificate for multiple domain names

A few years ago I setup an S3 bucket and enabled hosting. It's got an index.html file, which I use as a simple landing page. I then setup AWS CloudFront to use this S3 bucket as an origin server and ...
1
vote
1answer
31 views

Roundabout traffic from AWS Cloudfront to backend EC2 server

I'm on 'basic support' plan with AWS, and cannot therefore ask the in-house technical experts there. I was trying to set up cloudfront. My backend is at AWS Hong Kong. However, I noticed that traffic ...
0
votes
0answers
32 views

How to make Cloudfront pick up html files from S3 when request does not end in html

Our static website is stored on S3 and distributed via Cloudfront. The S3 file <S3-bucket>/foo/bar.html can be accessed at www.example.com/foo/bar.html but not at www.example.com/foo/bar (...
0
votes
0answers
26 views

AWS s3 image access is showing access denied while requesting the image through cloudfront

{ "Version": "2012-10-17", "Id": "Policy1548751526201", "Statement": [ { "Sid": "Stmt1548751524478", "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::...
0
votes
0answers
22 views

AWS CloudFront OAI with S3 Origin not logging GetObject in CloudTrail

As the subject line mentions. I have an S3 Website bucket which has only 1 policy allowing the CloudFront distribution's OAI that it is tethered, to have the "GetObject" action on all objects within ...
1
vote
1answer
80 views

Different http error code and html body

We are using AWS to host our applications. Yesterday we had an issue and were by accident deleted the "Custom domain names" from the API Gateway. The issue was resolved and the services started ...
0
votes
1answer
11 views

Base64 images not showing in drupal website after integration with cloudfront

I am receiving some issues on Drupal. I have integrated Amazon cloudfront with Drupal. The Cloudfront origin for my domain is drupal.example.com and Cnames are www.example.com and example.com. The ...
0
votes
1answer
83 views

Connect AWS SSL certificate to Intercom Articles

We have our support articles in Intercom Articles and need to attach a SSL certificate to the subdomain support.packaly.com. Intercom does not offer its own certificate so we need to do it through AWS....
-2
votes
1answer
75 views

How to check Amazon cloudfront/S3 changelogs?

Can I see any kind of changelogs? And is it also possible to see the IP addresses (with or without the access tokens) that were used?
3
votes
1answer
2k views

Can TLSv1 / SNI be blocked by the network? (routers, firewalls, etc)

Our web site serves static content through a content delivery network (AWS CloudFront) which is configured to respond to a number of CNAMEs and use our SSL wildcard certificate for these hostnames. ...
0
votes
1answer
3k views

Nginx reverse-proxy to a cloudfront distribution and preserve gzip compression

I have problems trying to set up a nginx reverse-proxy that preservers gzip compression. My setup : I have a CLoudfront distribution with gzip compression enabled (as you can see on http://...
0
votes
0answers
50 views

AWS Cognito Hosted UI Bypasses WAF

I have an S3 hosted site behind a Cloudfront and WAF. I set up a Cognito hosted UI with a custom domain (auth.example.com where example.com is my site). Cognito generates a Cloudfront distribution ...
2
votes
4answers
6k views

AWS S3, CloudFront, web font CORS error

I've just moved from my previous CDN to CloudFront for two of my websites. First one is working fine but I used the same snapshot in DigitalOcean to create the 2nd site and here I am getting ...
1
vote
1answer
55 views

WAF + cloud front block IP

I have successfully blocked an IP in waf which is configured to work with Cloud front Is there a way to block IP address before it reaches cloudfront? It wouldn’t seem possible as I tried blocked in ...
1
vote
1answer
84 views

How to use AWS CloudFront for serving both Images and Website?

I have an e-commerce website, an ASP.NET website running on Windows/IIS. Currently I have all my product photos on the local server's File System but since the number of photos are growing I have ...
0
votes
1answer
23 views

Can I add HubSpot's blog as origin in my CloudFront distribution?

Let's pretend example.com is my domain. I'd like to have: HubSpot's provided landing page at example.com/ HubSpot's provided blog at example.com/blog/ my website hosted on AWS S3 at example.com/map/ ...
1
vote
2answers
48 views

Custom subdomain on Route 53 pointing to cloudfront distribution and s3 static website not working

I'm trying to configure a custom domain name ("test.example.com") transferred to Route 53, pointing towards an S3 static website bucket ("test.example.com"), through the use of a cloudfront ...
0
votes
1answer
13 views

/index.html: better to use no-store or no-cache for cache-control?

When the root page is subject to frequent invalidation, like a news feed, do you generally prefer no-store or no-cache in the response header of cache-control? One advantage of no-store - from what I ...
1
vote
0answers
62 views

Client connects to Cloudfront via HTTP2, then connects to an Apache Server via HTTP1, can HTTP2 vulnerabilities be exploited in the HTTP1 connection?

We have an environment where customers connect to a Cloudfront distribution via HTTP2 and then from the Cloudfront distribution to an Apache web server via a HTTP1 connection. [ client ] ---(https, ...
0
votes
1answer
42 views

How proxy all request that comes to some path like “/app*” to an EC2 instance using Cloudfront?

Right now I have a site hosted in S3 and delivery through Cloudfront and I have an application running on an EC2 instance. the problem is I need to serve the application using a folder in the domain ...
2
votes
1answer
95 views

Will Route 53 geolocation routing behind CloudFront operate on users or edge location?

If I've got CloudFront set up with the origin being an address in Route 53, and geolocation routing for record in Route 53, will Route 53 do the geolocation based on the CloudFront edge location IP or ...
2
votes
1answer
4k views

Setting up CloudFront [Custom Origin] for EC2 instance

I have been checking things up & down on Google & AWS Documentation but can't seem to nail this one. I have an EC2 instance setup with a domain being served via a virtual host and I need to ...
1
vote
1answer
79 views

CloudFront invalidation “madness”

When I push a new site, I update the Origin ID to point at a new version, per screenshot: This in turn triggers the Status change from Deployed to In progress on the main CF Distributions console. ...
0
votes
1answer
62 views

Why do cloundfront signed urls and cookies require account root? [closed]

According to this documentation for generating key pairs for use with Cloudfront Signed URLs and Signed Cookies root credentials are required to either generate or upload key pairs. Other key pairs ...
0
votes
1answer
88 views

CloudFront drops Access-Control-Expose-Headers header when Accept-Encoding is set

I am trying to get CloudFront to serve a gzipped text file along with Content-Length: <bytes> and Access-Control-Expose-Headers: Content-Length headers so I can display the download progress ...
0
votes
0answers
44 views

How to configure Cloudfront for API Gateway with API key enabled?

I configured two API Gateways one with API-key enabled and the other with API-key disabled. For both the API gateways I configured and enabled CloudFront. For the API-gateway which has API-key ...
1
vote
1answer
77 views

AWS CloudFront - redirect root domain requests

First time poster on serverfault, apologies if this is in the wrong place. I have a website that I am trying to set up on AWS CloudFront. It is currently configured to serve static web content from S3,...
0
votes
0answers
59 views

How do I solve a CNAMEAlreadyExists error?

I'm trying to deploy a next.js app to AWS using serverless. However, when I try to deploy, I get this error: Serverless Error --------------------------------------- An error occurred: ...
3
votes
3answers
3k views

Problems with Gzip compression on Amazon CloudFront

I had a CloudFront distribution configured with S3 as an origin. I have enabled "Compress Objects Automatically" as per Amazon guide. Waited for the distribution status to display "online" then ...
0
votes
1answer
1k views

How to edit response header of Amazon s3

http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/ServingCompressedFiles.html According to the above doc, for cloud-front to gzip compress files it receives from origin, the response ...
0
votes
0answers
17 views

How to fix below-cloudfront distribution update error

I was trying to update cloudfront distribution(disable/remove OriginSSLprotocol:SSLv3) using below commands aws cloudfront get-distribution-config --id E29BDBENPXM1VE | jq 'del(.DistributionConfig....
3
votes
1answer
1k views

Can you setup a whitelist for allowed files in Amazon CloudFront

I'm using CloudFront as a CDN, and my website as an origin for pulls. Basically, I have cdn.mydomain.com pointing over to Cloudfront, and Cloudfront pulls any requests from www.mydomain.com. However,...
1
vote
0answers
133 views

Multi-tenant (multi-domain / multi-certificate) on AWS Cloudfront

I have AWS CloudFront serving content (from EC2/etc), this works fine. The content I have is 'multi-tenant' in that it adjusts its branding/theme based on the domain being used. In theory I would just ...
5
votes
2answers
4k views

How to store a Cloudfront custom error page in S3?

I have a Cloudfront plugged on an AWS load balancer. I saw in the AWS documentation that I can customize Cloudfront custom error pages. I tried to store these error pages in S3 as it is recommended ...
0
votes
0answers
52 views

CloudFront Reverse Proxy - The specified CGI application encountered an error and the server terminated the process

I have a Wordpress website sat at something.example.com that all works fine, no problems whatsoever. We need this website to be accessible via example.com/something which is a reverse proxy from AWS ...
0
votes
1answer
39 views

Auto redirect Amazon CloudFront content from www to non-www

I'm really new to Amazon CloudFront. I have set up an S3 with Cloudfront, then I'm using a custom domain that I setup in CloudFlare. I can access my photo normally with this kind of link : https://...
0
votes
0answers
43 views

AWS Cloudfront Usecase: Geolocation For Web App With Cookies and Query String Params

I want to make sure I have the correct usecase for AWS Cloudfront. Typically I believe it is used to cache static assets, such as those put in AWS S3 storage. For example, it may end up looking like ...
0
votes
0answers
120 views

Cloudfront with Nginx 302 redirect - resolve internally

Currently, We have hosted our application on two different paths, App1: https://website.wordpress.com [EC2 with Nginx] App2: https://poc.angularApp.com/ [Hosted in AWS S3 with Coludfront] My ...