class Signing

Language	Type name
.NET	Amazon.CDK.AWS.CloudFront.Signing
Go	github.com/aws/aws-cdk-go/awscdk/v2/awscloudfront#Signing
Java	software.amazon.awscdk.services.cloudfront.Signing
Python	aws_cdk.aws_cloudfront.Signing
TypeScript (source)	aws-cdk-lib » aws_cloudfront » Signing

Options for how CloudFront signs requests.

Example

const myBucket = new s3.Bucket(this, 'myBucket');
const oac = new cloudfront.S3OriginAccessControl(this, 'MyOAC', {
  signing: cloudfront.Signing.SIGV4_NO_OVERRIDE
});
const s3Origin = origins.S3BucketOrigin.withOriginAccessControl(myBucket, {
    originAccessControl: oac
  }
)
new cloudfront.Distribution(this, 'myDist', {
  defaultBehavior: {
    origin: s3Origin
  },
});

Initializer

new Signing(protocol: SigningProtocol, behavior: SigningBehavior)

Parameters

• protocol SigningProtocol
• behavior SigningBehavior

Properties

Name	Type	Description
behavior	SigningBehavior	Which requests CloudFront signs.
protocol	SigningProtocol	The signing protocol.
static NEVER	Signing	Do not sign any origin requests.
static SIGV4_ALWAYS	Signing	Sign all origin requests using the AWS Signature Version 4 signing protocol.
static SIGV4_NO_OVERRIDE	Signing	Sign only if the viewer request doesn't contain the Authorization header using the AWS Signature Version 4 signing protocol.

---

behavior

Type: SigningBehavior

Which requests CloudFront signs.

---

protocol

Type: SigningProtocol

The signing protocol.

---

static NEVER

Type: Signing

Do not sign any origin requests.

---

static SIGV4_ALWAYS

Type: Signing

Sign all origin requests using the AWS Signature Version 4 signing protocol.

---

static SIGV4_NO_OVERRIDE

Type: Signing

Sign only if the viewer request doesn't contain the Authorization header using the AWS Signature Version 4 signing protocol.