This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::CloudFront::KeyGroup
<a name="aws-resource-cloudfront-keygroup"></a>

A key group.

A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html).

## Syntax
<a name="aws-resource-cloudfront-keygroup-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-cloudfront-keygroup-syntax.json"></a>

```
{
  "Type" : "AWS::CloudFront::KeyGroup",
  "Properties" : {
      "[KeyGroupConfig](#cfn-cloudfront-keygroup-keygroupconfig)" : KeyGroupConfig
    }
}
```

### YAML
<a name="aws-resource-cloudfront-keygroup-syntax.yaml"></a>

```
Type: AWS::CloudFront::KeyGroup
Properties:
  [KeyGroupConfig](#cfn-cloudfront-keygroup-keygroupconfig): 
    KeyGroupConfig
```

## Properties
<a name="aws-resource-cloudfront-keygroup-properties"></a>

`KeyGroupConfig`  <a name="cfn-cloudfront-keygroup-keygroupconfig"></a>
The key group configuration.  
*Required*: Yes  
*Type*: [KeyGroupConfig](aws-properties-cloudfront-keygroup-keygroupconfig.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Return values
<a name="aws-resource-cloudfront-keygroup-return-values"></a>

### Ref
<a name="aws-resource-cloudfront-keygroup-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the ID of the key group. For example: `e9fcd3cf-f3f4-4b61-bd85-9ba9e091b309`.

For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).

### Fn::GetAtt
<a name="aws-resource-cloudfront-keygroup-return-values-fn--getatt"></a>

The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).

#### 
<a name="aws-resource-cloudfront-keygroup-return-values-fn--getatt-fn--getatt"></a>

`Id`  <a name="Id-fn::getatt"></a>
The identifier for the key group.

`LastModifiedTime`  <a name="LastModifiedTime-fn::getatt"></a>
The date and time when the key group was last modified.

# AWS::CloudFront::KeyGroup KeyGroupConfig
<a name="aws-properties-cloudfront-keygroup-keygroupconfig"></a>

A key group configuration.

A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html).

## Syntax
<a name="aws-properties-cloudfront-keygroup-keygroupconfig-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-cloudfront-keygroup-keygroupconfig-syntax.json"></a>

```
{
  "[Comment](#cfn-cloudfront-keygroup-keygroupconfig-comment)" : String,
  "[Items](#cfn-cloudfront-keygroup-keygroupconfig-items)" : [ String, ... ],
  "[Name](#cfn-cloudfront-keygroup-keygroupconfig-name)" : String
}
```

### YAML
<a name="aws-properties-cloudfront-keygroup-keygroupconfig-syntax.yaml"></a>

```
  [Comment](#cfn-cloudfront-keygroup-keygroupconfig-comment): String
  [Items](#cfn-cloudfront-keygroup-keygroupconfig-items): 
    - String
  [Name](#cfn-cloudfront-keygroup-keygroupconfig-name): String
```

## Properties
<a name="aws-properties-cloudfront-keygroup-keygroupconfig-properties"></a>

`Comment`  <a name="cfn-cloudfront-keygroup-keygroupconfig-comment"></a>
A comment to describe the key group. The comment cannot be longer than 128 characters.  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Items`  <a name="cfn-cloudfront-keygroup-keygroupconfig-items"></a>
A list of the identifiers of the public keys in the key group.  
*Required*: Yes  
*Type*: Array of String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Name`  <a name="cfn-cloudfront-keygroup-keygroupconfig-name"></a>
A name to identify the key group.  
*Required*: Yes  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)