Questions tagged [amazon-cloudfront]

Amazon CloudFront is a content delivery network (CDN) offered by Amazon Web Services.

Filter by
Sorted by
Tagged with
0
votes
1answer
31 views

attackers bypass aws waf to go for ec2 instances directly

My Setup I have Elastic Beanstalk application, with a public LoadBalancer and public IPs on EC2. The application is behind CloudFront, which is protected with AWS WAF from different attacks I am ...
0
votes
0answers
20 views

How to restrict traffic to website for whitelisted countries only through cloudfront?

I've configured my aws EC-2 server with CloudFront. I'm using node.js with handlebars run with ubuntu/nginx from EC2. I've set up the test page like amazon suggested with two images, one served from ...
1
vote
0answers
20 views

How to serve views from the Cloudfront CDN

The only reason I am using cloudfront is to limit my website to United States users. I have already whitelisted the US as a country in the cloudfront settings. I would like the whole website to not be ...
0
votes
0answers
11 views

Amazon CloudFront CDN and role-based access (RBAC)

I have web-service that stores uploaded images to S3. These images then get distributed to the CloudFront CDN and served by signed URLs. I.e. only authorized users who have a URL signature can access ...
0
votes
1answer
27 views

Redirecting HTTPS -> HTTPS on AWS?

I have a static website w/ S3 + Route53 + Cloudfront set up. I am successfully able to do the following redirects: http://example.com -> https://example.com http://www.example.com -> https://example....
0
votes
1answer
87 views

AWS CloudFront Traffic Not Reaching EC2 Instance

I've got an API app on EC2 that only knows HTTP, and it's listening on port 8080. Its code does not return 504 for any request. I need CloudFront to be an SSL-Terminating reverse proxy because the app ...
0
votes
0answers
16 views

Traffic handling capacity for 1 EC2 instance for t3.2xlarge [duplicate]

Protocol exchange between phone server and IOT device(inter regional). say there are 100000 users and each are requesting or using 12 - 20 times a day may be approximately at the same time(protocols ...
0
votes
1answer
44 views

How to route to Cloudfront+s3 and rest to ALB in Route53?

The project has a domain name foobar.com pointing to a legacy system, hosting and serving mainly static files. The project got more complex over time and in AWS ALB certain /routes are pointed to ...
0
votes
0answers
31 views

Same-Origin Policy : configuring CloudFront static content to communicate with dynamic backend?

I am currently hosting a static single-page web application with AWS CloudFront. I would like to add a backend service for my web ui/client to communicate with so that I can serve dynamic content. ...
2
votes
1answer
53 views

JSON file not rendering when served up from AWS Cloudfront

I have a static JSON formatted file called apple-app-site-association sitting at the root of my webapp (e.g. webapp.foo.bar/apple-app-site-association) which is served up via AWS CloudFront. When I ...
0
votes
1answer
28 views

Amazon CloudFront default SSL certificate for multiple domain names

A few years ago I setup an S3 bucket and enabled hosting. It's got an index.html file, which I use as a simple landing page. I then setup AWS CloudFront to use this S3 bucket as an origin server and ...
1
vote
1answer
31 views

Roundabout traffic from AWS Cloudfront to backend EC2 server

I'm on 'basic support' plan with AWS, and cannot therefore ask the in-house technical experts there. I was trying to set up cloudfront. My backend is at AWS Hong Kong. However, I noticed that traffic ...
0
votes
0answers
32 views

How to make Cloudfront pick up html files from S3 when request does not end in html

Our static website is stored on S3 and distributed via Cloudfront. The S3 file <S3-bucket>/foo/bar.html can be accessed at www.example.com/foo/bar.html but not at www.example.com/foo/bar (...
0
votes
0answers
27 views

AWS s3 image access is showing access denied while requesting the image through cloudfront

{ "Version": "2012-10-17", "Id": "Policy1548751526201", "Statement": [ { "Sid": "Stmt1548751524478", "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::...
0
votes
0answers
23 views

AWS CloudFront OAI with S3 Origin not logging GetObject in CloudTrail

As the subject line mentions. I have an S3 Website bucket which has only 1 policy allowing the CloudFront distribution's OAI that it is tethered, to have the "GetObject" action on all objects within ...
1
vote
1answer
81 views

Different http error code and html body

We are using AWS to host our applications. Yesterday we had an issue and were by accident deleted the "Custom domain names" from the API Gateway. The issue was resolved and the services started ...
0
votes
0answers
51 views

AWS Cognito Hosted UI Bypasses WAF

I have an S3 hosted site behind a Cloudfront and WAF. I set up a Cognito hosted UI with a custom domain (auth.example.com where example.com is my site). Cognito generates a Cloudfront distribution ...
1
vote
1answer
58 views

WAF + cloud front block IP

I have successfully blocked an IP in waf which is configured to work with Cloud front Is there a way to block IP address before it reaches cloudfront? It wouldn’t seem possible as I tried blocked in ...
0
votes
1answer
11 views

Base64 images not showing in drupal website after integration with cloudfront

I am receiving some issues on Drupal. I have integrated Amazon cloudfront with Drupal. The Cloudfront origin for my domain is drupal.example.com and Cnames are www.example.com and example.com. The ...
1
vote
1answer
87 views

How to use AWS CloudFront for serving both Images and Website?

I have an e-commerce website, an ASP.NET website running on Windows/IIS. Currently I have all my product photos on the local server's File System but since the number of photos are growing I have ...
0
votes
1answer
87 views

Connect AWS SSL certificate to Intercom Articles

We have our support articles in Intercom Articles and need to attach a SSL certificate to the subdomain support.packaly.com. Intercom does not offer its own certificate so we need to do it through AWS....
0
votes
1answer
14 views

/index.html: better to use no-store or no-cache for cache-control?

When the root page is subject to frequent invalidation, like a news feed, do you generally prefer no-store or no-cache in the response header of cache-control? One advantage of no-store - from what I ...
1
vote
2answers
50 views

Custom subdomain on Route 53 pointing to cloudfront distribution and s3 static website not working

I'm trying to configure a custom domain name ("test.example.com") transferred to Route 53, pointing towards an S3 static website bucket ("test.example.com"), through the use of a cloudfront ...
1
vote
0answers
63 views

Client connects to Cloudfront via HTTP2, then connects to an Apache Server via HTTP1, can HTTP2 vulnerabilities be exploited in the HTTP1 connection?

We have an environment where customers connect to a Cloudfront distribution via HTTP2 and then from the Cloudfront distribution to an Apache web server via a HTTP1 connection. [ client ] ---(https, ...
0
votes
1answer
42 views

How proxy all request that comes to some path like “/app*” to an EC2 instance using Cloudfront?

Right now I have a site hosted in S3 and delivery through Cloudfront and I have an application running on an EC2 instance. the problem is I need to serve the application using a folder in the domain ...
2
votes
1answer
101 views

Will Route 53 geolocation routing behind CloudFront operate on users or edge location?

If I've got CloudFront set up with the origin being an address in Route 53, and geolocation routing for record in Route 53, will Route 53 do the geolocation based on the CloudFront edge location IP or ...
0
votes
1answer
63 views

Why do cloundfront signed urls and cookies require account root? [closed]

According to this documentation for generating key pairs for use with Cloudfront Signed URLs and Signed Cookies root credentials are required to either generate or upload key pairs. Other key pairs ...
1
vote
1answer
81 views

CloudFront invalidation “madness”

When I push a new site, I update the Origin ID to point at a new version, per screenshot: This in turn triggers the Status change from Deployed to In progress on the main CF Distributions console. ...
0
votes
1answer
23 views

Can I add HubSpot's blog as origin in my CloudFront distribution?

Let's pretend example.com is my domain. I'd like to have: HubSpot's provided landing page at example.com/ HubSpot's provided blog at example.com/blog/ my website hosted on AWS S3 at example.com/map/ ...
0
votes
1answer
95 views

CloudFront drops Access-Control-Expose-Headers header when Accept-Encoding is set

I am trying to get CloudFront to serve a gzipped text file along with Content-Length: <bytes> and Access-Control-Expose-Headers: Content-Length headers so I can display the download progress ...
0
votes
0answers
45 views

How to configure Cloudfront for API Gateway with API key enabled?

I configured two API Gateways one with API-key enabled and the other with API-key disabled. For both the API gateways I configured and enabled CloudFront. For the API-gateway which has API-key ...
1
vote
1answer
86 views

AWS CloudFront - redirect root domain requests

First time poster on serverfault, apologies if this is in the wrong place. I have a website that I am trying to set up on AWS CloudFront. It is currently configured to serve static web content from S3,...
0
votes
0answers
61 views

How do I solve a CNAMEAlreadyExists error?

I'm trying to deploy a next.js app to AWS using serverless. However, when I try to deploy, I get this error: Serverless Error --------------------------------------- An error occurred: ...
0
votes
0answers
17 views

How to fix below-cloudfront distribution update error

I was trying to update cloudfront distribution(disable/remove OriginSSLprotocol:SSLv3) using below commands aws cloudfront get-distribution-config --id E29BDBENPXM1VE | jq 'del(.DistributionConfig....
1
vote
0answers
139 views

Multi-tenant (multi-domain / multi-certificate) on AWS Cloudfront

I have AWS CloudFront serving content (from EC2/etc), this works fine. The content I have is 'multi-tenant' in that it adjusts its branding/theme based on the domain being used. In theory I would just ...
0
votes
0answers
53 views

CloudFront Reverse Proxy - The specified CGI application encountered an error and the server terminated the process

I have a Wordpress website sat at something.example.com that all works fine, no problems whatsoever. We need this website to be accessible via example.com/something which is a reverse proxy from AWS ...
0
votes
1answer
39 views

Auto redirect Amazon CloudFront content from www to non-www

I'm really new to Amazon CloudFront. I have set up an S3 with Cloudfront, then I'm using a custom domain that I setup in CloudFlare. I can access my photo normally with this kind of link : https://...
0
votes
0answers
43 views

AWS Cloudfront Usecase: Geolocation For Web App With Cookies and Query String Params

I want to make sure I have the correct usecase for AWS Cloudfront. Typically I believe it is used to cache static assets, such as those put in AWS S3 storage. For example, it may end up looking like ...
0
votes
0answers
125 views

Cloudfront with Nginx 302 redirect - resolve internally

Currently, We have hosted our application on two different paths, App1: https://website.wordpress.com [EC2 with Nginx] App2: https://poc.angularApp.com/ [Hosted in AWS S3 with Coludfront] My ...
0
votes
0answers
27 views

Give permission only to CloudFront to access AWS S3 website

Is there a way restrict access to S3 website? If one has website enabled S3 like this one: mywebsite.s3-website-eu-west-1.amazonaws.com? I have been reading that one could use custom headers to ...
2
votes
1answer
35 views

Updated static files do not get served with CDN after deployment because of cache

I recently started using AWS Cloudfront to serve my static files with CDN. Since then, when I deploy updated static files such as js or css, CDN doesn't serve updated static files right away. Because ...
4
votes
1answer
267 views

Any drawbacks to AWS certificate manager wildcard certificates?

Let's say I'm using AWS Certificate Manager to get a certificate for example.com for use with AWS CloudFront. I can specify an alternate domain of www.example.com and point it to another CloudFront ...
3
votes
1answer
608 views

AWS Lambda, AWS API Gateway, AWS Cloudfront gives 403 error

I run a Django project deployed on AWS lambda using serverless Zappa framework. This can be accessed by a randomly generated link from AWS API Gateway lets say:- randomly-generated-link.aws.amazon....
0
votes
1answer
72 views

CloudFront - Much higher miss-rate in North America compared to Europe

I'm serving my software downloads from CloudFront. Miss-rate in North America is much higher than in Europe. In America miss-rate is 55.7% while in Europe it's 19.69%. North America: Europe: The ...
1
vote
0answers
276 views

Nginx Redirect to EC2 Instance

ORIGINAL I had angular (version: 7) site which was deployed on S3 bucket, but for SEO purposes, recently I integrated Angular Universal. Now I moved site/frontend from S3 bucket to EC2 instance. I ...
0
votes
0answers
236 views

How to have cloudfront distribution listen on custom port for HTTPS?

I have setup a Cloudfront distribution on AWS with custom domain name to fetch firmware update file from S3. However, the existing devices that we have with customers make an HTTPS request to that ...
0
votes
0answers
55 views

CloudFront / S3 returning 404 when no trailing slash

Here is my subdirectory setup www.example.com www.example.com/blog ---- index.html ---- etc. When I visit www.example.com/blog/ (note the trailing slash), it serves index.html just fine. However, ...
0
votes
0answers
55 views

Origin Access Identity alongside AWS Signature Version 4

Given a Cloudfront instance acting as a web distribution for an S3 bucket, what's the recommended approach to a public GET, authorised PUT? Is it possible to use a combination of Origin Access ...
0
votes
0answers
86 views

Use AWS Cloudfront to forward to Wordpress site in subfolder

We use AWS S3 for hosting our React website. On top of it there is a Cloudfront distribution, which points our custom domain name https://www.mycompany.com to the mentioned website. Now, our ...
2
votes
0answers
94 views

CloudFront usually misses from browser, hits from cURL

When I load my HTML page in my browser, all requests for assets have x-cache: Miss from cloudfront. If I reload my browser very quickly, I can sometimes get a Hit. If I open my developer tools and "...