aws-ipranges-cloudfront.md

Amazon CloudFront (aws-ipranges-cloudfront)

Deployment via CloudFormation console

Download aws-ipranges-cloudfront.yaml file and login to AWS CloudFormation console. Choose Create Stack, Upload a template file, Choose File, select aws-ipranges-cloudfront.yaml and choose Next.

CloudFormation Parameters

Specify a Stack name and adjust parameters values as desired. Parameters options include

CloudFront API

• awsServices: names of AWS service to return by root URL separated by commas. Default is CLOUDFRONT_ORIGIN_FACING

Lambda

• pythonRuntime: Python runtime version. Default is python3.12
• cpuArchitecture: instruction set architecture, either x86_64 or arm64. Default is arm64

CloudFront

• enableIPv6: enable or disable IPv6. Default is yes
• viewerProtocolPolicy: configure viewer access policy for HTTP and HTTPS requests. Default is redirect-to-https
• cachePolicy: managed cache policy. Default is CachingDisabled
• responseHeaderPolicy: managed response headers policy. Default is SecurityHeadersPolicy

Continue Next with Configure stack options, Review settings, and click Create Stack to launch your stack.

After stack has been successfully created, its status changes to CREATE_COMPLETE.

CloudFormation Outputs

The following are available in Outputs section

• cloudFrontURL: CloudFront distribution domain name
• cloudFrontConsole: CloudFront console URL
• lambdaFunctionLog: CLoudWatch log URL for Lambda function

CloudFront Customisation

Refer to Amazon CloudFront documentation for customisation options. Some examples include

• Use custom URLs by adding alternate domain names (CNAMEs)
• Routing traffic to an Amazon CloudFront distribution by using your domain name
• Use AWS WAF protections
• Restricting the geographic distribution of your content
• CloudFront and edge function logging

Security

See CONTRIBUTING for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.