Creating Updating and Deleting Distributions

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-create-delete.html

You can create, update, or delete a distribution by completing the steps in the following topics.

• Steps for Creating a Distribution—Overview

  https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-creating.html

• Creating a Distribution

  https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-creating-console.html

  This topic is about working with distributions by using the console.

  If you want to create or update a distribution by using the CloudFront API, see Create Distribution or Update Distribution in the Amazon CloudFront API Reference. When you update your distribution, be aware that a number of additional fields are required that are not required to create a distribution. To help make sure that all of the required fields are included when you update your distribution by using the CloudFront API, follow the steps described in the Amazon CloudFront API Reference.

• Values That You Specify When You Create or Update a Distribution

  https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html

  When you create a new distribution or update an existing distribution, you specify the following values.

  • Delivery Method
    • ‘Web’ or ‘RTMP’
    • Unless you’re using Adobe Flash Media Server with RTMP, this value is always ‘Web’.
  • Origin Settings When you create or update a distribution, you provide information about one or more locations—known as origins—where you store the original versions of your web content. CloudFront gets your web content from your origins and serves it to viewers via a world-wide network of edge servers. Each origin is either an Amazon S3 bucket or an HTTP server, for example, a web server.

    Origin Domain Name

    The DNS domain name of the Amazon S3 bucket or HTTP server from which you want CloudFront to get objects for this origin. Choose the domain name in the Origin Domain Name field, or type the name. The domain name is not case sensitive.

    If your origin is an Amazon S3 bucket, note the following:

    • If the bucket is configured as a website, enter the Amazon S3 static website hosting endpoint for your bucket; don’t select the bucket name from the list in the Origin Domain Name field.
    • The files must be publicly readable unless you secure your content in Amazon S3 by using a CloudFront origin access identity.

    Origin Path

    If you want CloudFront to request your content from a directory in your AWS resource or your custom origin, enter the directory path, beginning with a slash (‘/’). CloudFront appends the directory path to the value of Origin Domain Name, for example, cf-origin.example.com/production/images. Do not add a slash (‘/’) at the end of the path.

    Origin ID

    A string that uniquely distinguishes this origin or origin group in this distribution. If you create cache behaviors in addition to the default cache behavior, you use the ID that you specify here to identify the origin or origin group that you want CloudFront to route a request to when the request matches the path pattern for that cache behavior.

  The following values are for Amazon S3 origins only (except if configured as website endpoints):

  • Restrict Bucket Access
  • Origin Access Identity
  • Comment for New Identity
  • Your Identities
  • Grant Read Permissions on Bucket

  The following values are for custom origins only, such as Amazon EC2, Elastic Load Balancing, Amazon S3 buckets configured as website endpoints, or your own web server:

  Minimum Origin SSL Protocol

  we recommend that you choose the latest TLS protocol that your origin supports.

  Origin Protocol Policy

  The protocol policy that you want CloudFront to use when fetching objects from your origin server.

  HTTP Only

  If your origin is an Amazon S3 bucket configured as a website endpoint, you must choose this option. Amazon S3 doesn’t support HTTPS connections for website endpoints.

  HTTPS Only

  CloudFront uses only HTTPS to access the origin.

  Match Viewer

  CloudFront communicates with your origin using HTTP or HTTPS, depending on the protocol of the viewer request.

  Origin Response Timeout

  Origin Keep-alive Timeout

  HTTP Port

  HTTPS Port

  The following value is for all types of origins:

  • Origin Custom Headers If you want CloudFront to include custom headers whenever it forwards a request to your origin, specify the following values:
    • Header Name
    • Value
  • Cache Behavior Settings A cache behavior lets you configure a variety of CloudFront functionality for a given URL path pattern for files on your website.

    When you create a new distribution, you specify settings for the default cache behavior, which automatically forwards all requests to the origin that you specify when you create the distribution. After you create a distribution, you can create additional cache behaviors that define how CloudFront responds when it receives a request for objects that match a path pattern. If you create additional cache behaviors, the default cache behavior is always the last to be processed. Other cache behaviors are processed in the order in which they’re listed in the CloudFront console or, if you’re using the CloudFront API, the order in which they’re listed in the DistributionConfig element for the distribution.

    • Path Pattern
    • Origin (Existing Distributions Only)
    • Viewer Protocol Policy
    • Allowed HTTP Methods
    • Field Level Encryption
    • Cached HTTP Methods
    • Cache Based on Selected Request Headers
    • Whitelist Headers
    • Object Caching
    • Minimum TTL
    • Maximum TTL
    • Default TTL
    • Forward Cookies
    • Whitelist Cookies
    • Query String Forwarding and Caching
    • Query String Whitelist
    • Smooth Streaming
    • Restrict Viewer Access (Use Signed URLs)
    • Trusted Signers
    • AWS Account Numbers
    • Compress Objects Automatically
    • Event Type
    • Lambda Function ARN
  • Distribution Details
    • Price Class
    • AWS WAF Web ACL
    • Alternate Domain Names (CNAMEs)
    • SSL Certificate
    • Clients Supported
    • Security Policy
    • Minimum SSL Security Protocol – See Security Policy
    • Supported HTTP Versions
    • Default Root Object
    • Logging
    • Bucket for Logs
    • Log Prefix
    • Cookie Logging
    • Enable IPv6
    • Comment
    • Distribution State
  • Custom Error Pages and Error Caching
    • Error Code
    • Response Page Path
    • Response Code
    • Error Caching Minimum TTL
  • Restrictions
    • Enable Geo Restriction
    • Restriction Type
    • Countries