A list of key groups, and the public keys in each key group, that CloudFront can use to verify the signatures of signed URLs and signed cookies.

A list of accounts and the active CloudFront key pairs in each account that CloudFront can use to verify the signatures of signed URLs and signed cookies.

A complex type that contains information about CNAMEs (alternate domain names), if any, for this distribution.

Amazon Web Services services in China customers must file for an Internet Content Provider (ICP) recordal if they want to serve content publicly on an alternate domain name, also known as a CNAME, that they've added to CloudFront. AliasICPRecordal provides the ICP recordal status for CNAMEs associated with distributions. The status is returned in the CloudFront response; you can't configure it yourself.

A complex type that controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin. There are three choices:

A complex type that describes how CloudFront processes requests.

A complex type that contains zero or more CacheBehavior elements.

A complex type that controls whether CloudFront caches the response to requests using the specified HTTP methods. There are two choices:

A cache policy.

A cache policy configuration.

An object that determines whether any cookies in viewer requests (and if so, which cookies) are included in the cache key and automatically included in requests that CloudFront sends to the origin.

An object that determines whether any HTTP headers (and if so, which headers) are included in the cache key and automatically included in requests that CloudFront sends to the origin.

A list of cache policies.

An object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and automatically included in requests that CloudFront sends to the origin.

Contains a cache policy.

CloudFront origin access identity.

Origin access identity configuration. Send a GET request to the /_CloudFront API version_/CloudFront/identity ID/config resource.

Lists the origin access identities for CloudFront.Send a GET request to the /_CloudFront API version_/origin-access-identity/cloudfront resource. The response includes a CloudFrontOriginAccessIdentityList element with zero or more CloudFrontOriginAccessIdentitySummary child elements. By default, your entire list of origin access identities is returned in one single page. If the list is long, you can paginate it using the MaxItems and Marker parameters.

Summary of the information about a CloudFront origin access identity.

An alias (also called a CNAME) and the CloudFront distribution and Amazon Web Services account ID that it’s associated with. The distribution and account IDs are partially hidden, which allows you to identify the distributions and accounts that you own, but helps to protect the information of ones that you don’t own.

A list of aliases (also called CNAMEs) and the CloudFront distributions and Amazon Web Services accounts that they are associated with. In the list, the distribution and account IDs are partially hidden, which allows you to identify the distributions and accounts that you own, but helps to protect the information of ones that you don’t own.

A field-level encryption content type profile.

The configuration for a field-level encryption content type-profile mapping.

Field-level encryption content type-profile.

Contains a list of cookie names.

This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.

The request to create a new origin access identity (OAI). An origin access identity is a special CloudFront user that you can associate with Amazon S3 origins, so that you can secure all or just some of your Amazon S3 content. For more information, see Restricting Access to Amazon S3 Content by Using an Origin Access Identity in the Amazon CloudFront Developer Guide.

The returned result of the corresponding request.

The request to create a new distribution.

The returned result of the corresponding request.

The request to create a new distribution with tags.

The returned result of the corresponding request.

The request to create an invalidation.

The returned result of the corresponding request.

The request to create a new streaming distribution.

The returned result of the corresponding request.

The request to create a new streaming distribution with tags.

The returned result of the corresponding request.

A complex type that controls:

A complex type that controls:

A complex type that contains the list of Custom Headers for each origin.

A custom origin. A custom origin is any origin that is not an Amazon S3 bucket, with one exception. An Amazon S3 bucket that is configured with static website hosting is a custom origin.

A complex type that describes the default cache behavior if you don’t specify a CacheBehavior element or if request URLs don’t match any of the values of PathPattern in CacheBehavior elements. You must create exactly one default cache behavior.

Deletes a origin access identity.

This action deletes a web distribution. To delete a web distribution using the CloudFront API, perform the following steps.

The request to delete a streaming distribution.

A distribution tells CloudFront where you want content to be delivered from, and the details about how to track and manage content delivery.

A distribution configuration.

A distribution Configuration and a list of tags to be associated with the distribution.

A list of distribution IDs.

A distribution list.

A summary of the information about a CloudFront distribution.

Complex data type for field-level encryption profiles that includes all of the encryption entities.

Complex data type for field-level encryption profiles that includes the encryption key and field pattern specifications.

Contains information about the Amazon Kinesis data stream where you are sending real-time log data in a real-time log configuration.

A complex data type that includes the profile configurations and other options specified for field-level encryption.

A complex data type that includes the profile configurations specified for field-level encryption.

List of field-level encrpytion configurations.

A complex data type for field-level encryption profiles.

A complex data type of profiles for the field-level encryption.

List of field-level encryption profiles.

The field-level encryption profile summary.

A summary of a field-level encryption item.

A complex data type that includes the field patterns to match for field-level encryption.

This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.

A CloudFront function that is associated with a cache behavior in a CloudFront distribution.

A list of CloudFront functions that are associated with a cache behavior in a CloudFront distribution. CloudFront functions must be published to the LIVE stage to associate them with a cache behavior.

Contains configuration information about a CloudFront function.

A list of CloudFront functions.

Contains metadata about a CloudFront function.

Contains configuration information and metadata about a CloudFront function.

A complex type that controls the countries in which your content is distributed. CloudFront determines the location of your users using MaxMind GeoIP databases.

The origin access identity's configuration information. For more information, see CloudFrontOriginAccessIdentityConfig.

The returned result of the corresponding request.

The request to get an origin access identity's information.

The returned result of the corresponding request.

The request to get a distribution configuration.

The returned result of the corresponding request.

The request to get a distribution's information.

The returned result of the corresponding request.

The request to get an invalidation's information.

The returned result of the corresponding request.

To request to get a streaming distribution configuration.

The returned result of the corresponding request.

The request to get a streaming distribution's information.

The returned result of the corresponding request.

Contains a list of HTTP header names.

An invalidation.

An invalidation batch.

The InvalidationList complex type describes the list of invalidation objects. For more information about invalidation, see Invalidating Objects (Web Distributions Only) in the Amazon CloudFront Developer Guide.

A summary of an invalidation request.

A key group.

A key group configuration.

A list of key groups.

Contains information about a key group.

A list of CloudFront key pair identifiers.

A list of identifiers for the public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.

Contains information about the Amazon Kinesis data stream where you are sending real-time log data.

A complex type that contains a Lambda@Edge function association.

A complex type that specifies a list of Lambda@Edge functions associations for a cache behavior.

The request to list origin access identities.

The returned result of the corresponding request.

The request to list distributions that are associated with a specified WAF web ACL.

The response to a request to list the distributions that are associated with a specified WAF web ACL.

The request to list your distributions.

The returned result of the corresponding request.

The request to list invalidations.

The returned result of the corresponding request.

The request to list your streaming distributions.

The returned result of the corresponding request.

The request to list tags for a CloudFront resource.

The returned result of the corresponding request.

A complex type that controls whether access logs are written for the distribution.

A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.

An origin.

A complex type that contains HeaderName and HeaderValue elements, if any, for this distribution.

An origin group includes two origins (a primary origin and a second origin to failover to) and a failover criteria that you specify. You create an origin group to support origin failover in CloudFront. When you create or update a distribution, you can specifiy the origin group instead of a single origin, and CloudFront will failover from the primary origin to the second origin under the failover conditions that you've chosen.

A complex data type that includes information about the failover criteria for an origin group, including the status codes for which CloudFront will failover from the primary origin to the second origin.

An origin in an origin group.

A complex data type for the origins included in an origin group.

A complex data type for the origin groups specified for a distribution.

An origin request policy.

An origin request policy configuration.

An object that determines whether any cookies in viewer requests (and if so, which cookies) are included in requests that CloudFront sends to the origin.

An object that determines whether any HTTP headers (and if so, which headers) are included in requests that CloudFront sends to the origin.

A list of origin request policies.

An object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in requests that CloudFront sends to the origin.

Contains an origin request policy.

Contains information about the origins for this distribution.

CloudFront Origin Shield.

A complex type that contains information about the SSL/TLS protocols that CloudFront can use when establishing an HTTPS connection with your origin.

This object determines the values that CloudFront includes in the cache key. These values can include HTTP headers, cookies, and URL query strings. CloudFront uses the cache key to find an object in its cache that it can return to the viewer.

A complex type that contains information about the objects that you want to invalidate. For more information, see Specifying the Objects to Invalidate in the Amazon CloudFront Developer Guide.

A public key that you can use with signed URLs and signed cookies, or with field-level encryption.

Configuration information about a public key that you can use with signed URLs and signed cookies, or with field-level encryption.

A list of public keys that you can use with signed URLs and signed cookies, or with field-level encryption.

Contains information about a public key.

Query argument-profile mapping for field-level encryption.

Configuration for query argument-profile mapping for field-level encryption.

Query argument-profile mapping for field-level encryption.

This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.

Contains a list of query string names.

A real-time log configuration.

A list of real-time log configurations.

A subscription configuration for additional CloudWatch metrics.

A complex type that identifies ways in which you want to restrict distribution of your content.

A complex type that contains information about the Amazon S3 bucket from which you want CloudFront to get your media files for distribution.

A complex type that contains information about the Amazon S3 origin. If the origin is a custom origin or an S3 bucket that is configured as a website endpoint, use the CustomOriginConfig element instead.

A list of accounts and the active CloudFront key pairs in each account that CloudFront can use to verify the signatures of signed URLs and signed cookies.

A complex data type for the status codes that you specify that, when returned by a primary origin, trigger CloudFront to failover to a second origin.

A streaming distribution tells CloudFront where you want RTMP content to be delivered from, and the details about how to track and manage content delivery.

The RTMP distribution's configuration information.

A streaming distribution Configuration and a list of tags to be associated with the streaming distribution.

A streaming distribution list.

A summary of the information for a CloudFront streaming distribution.

A complex type that controls whether access logs are written for this streaming distribution.

A complex type that contains Tag key and Tag value.

A complex type that contains zero or more Tag elements.

The request to add tags to a CloudFront resource.

A complex type that contains zero or more Tag elements.

Contains the result of testing a CloudFront function with TestFunction.

A list of key groups whose public keys CloudFront can use to verify the signatures of signed URLs and signed cookies.

A list of accounts whose public keys CloudFront can use to verify the signatures of signed URLs and signed cookies.

The request to remove tags from a CloudFront resource.

The request to update an origin access identity.

The returned result of the corresponding request.

The request to update a distribution.

The returned result of the corresponding request.

The request to update a streaming distribution.

The returned result of the corresponding request.

A complex type that determines the distribution’s SSL/TLS configuration for communicating with viewers.