Distribution is the Schema for the Distributions API. Provides a CloudFront web distribution resource.
Type
CRD
Group
cloudfront.aws.upbound.io
Version
v1beta1
apiVersion: cloudfront.aws.upbound.io/v1beta1
kind: Distribution
DistributionSpec defines the desired state of Distribution
No description provided.
Extra CNAMEs (alternate domain names), if any, for this distribution.
One or more custom error response elements (multiples allowed).
Default cache behavior for this distribution (maximum one). Requires either cache_policy_id (preferred) or forwarded_values (deprecated) be set.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
A config block that triggers a lambda function with specific actions (maximum 4).
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
The logging configuration that controls how logs are written to your distribution (maximum one).
Ordered list of cache behaviors resource for this distribution. List from top to bottom in order of precedence. The topmost cache behavior will have precedence 0.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
Reference to a Function in cloudfront to populate functionArn.
Policies for referencing.
Selector for a Function in cloudfront to populate functionArn.
Policies for selection.
A config block that triggers a lambda function with specific actions (maximum 4).
Reference to a Function in lambda to populate lambdaArn.
Policies for referencing.
Selector for a Function in lambda to populate lambdaArn.
Policies for selection.
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
One or more origins for this distribution (multiples allowed).
The CloudFront custom origin configuration information. If an S3 origin is required, use origin_access_control_id or s3_origin_config instead.
SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS. A list of one or more of SSLv3, TLSv1, TLSv1.1, and TLSv1.2.
Reference to a OriginAccessControl in cloudfront to populate originAccessControlId.
Policies for referencing.
Selector for a OriginAccessControl in cloudfront to populate originAccessControlId.
Policies for selection.
CloudFront Origin Shield configuration information. Using Origin Shield can help reduce the load on your origin. For more information, see Using Origin Shield in the Amazon CloudFront Developer Guide.
CloudFront S3 origin configuration information. If a custom origin is required, use custom_origin_config instead.
Reference to a OriginAccessIdentity in cloudfront to populate originAccessIdentity.
Policies for referencing.
Selector for a OriginAccessIdentity in cloudfront to populate originAccessIdentity.
Policies for selection.
One or more origin_group for this distribution (multiples allowed).
The failover criteria for when to failover to the secondary origin.
List of HTTP status codes for the origin group.
Ordered member configuration blocks assigned to the origin group, where the first member is the primary origin. You must specify two members.
The restriction configuration for this distribution (maximum one).
No description provided.
ISO 3166-1-alpha-2 codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). If the type is specified as none an empty array can be used.
The SSL configuration for this distribution (maximum one).
THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.
Extra CNAMEs (alternate domain names), if any, for this distribution.
One or more custom error response elements (multiples allowed).
Default cache behavior for this distribution (maximum one). Requires either cache_policy_id (preferred) or forwarded_values (deprecated) be set.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
A config block that triggers a lambda function with specific actions (maximum 4).
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
The logging configuration that controls how logs are written to your distribution (maximum one).
Ordered list of cache behaviors resource for this distribution. List from top to bottom in order of precedence. The topmost cache behavior will have precedence 0.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
Reference to a Function in cloudfront to populate functionArn.
Policies for referencing.
Selector for a Function in cloudfront to populate functionArn.
Policies for selection.
A config block that triggers a lambda function with specific actions (maximum 4).
Reference to a Function in lambda to populate lambdaArn.
Policies for referencing.
Selector for a Function in lambda to populate lambdaArn.
Policies for selection.
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
One or more origins for this distribution (multiples allowed).
The CloudFront custom origin configuration information. If an S3 origin is required, use origin_access_control_id or s3_origin_config instead.
SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS. A list of one or more of SSLv3, TLSv1, TLSv1.1, and TLSv1.2.
Reference to a OriginAccessControl in cloudfront to populate originAccessControlId.
Policies for referencing.
Selector for a OriginAccessControl in cloudfront to populate originAccessControlId.
Policies for selection.
CloudFront Origin Shield configuration information. Using Origin Shield can help reduce the load on your origin. For more information, see Using Origin Shield in the Amazon CloudFront Developer Guide.
CloudFront S3 origin configuration information. If a custom origin is required, use custom_origin_config instead.
Reference to a OriginAccessIdentity in cloudfront to populate originAccessIdentity.
Policies for referencing.
Selector for a OriginAccessIdentity in cloudfront to populate originAccessIdentity.
Policies for selection.
One or more origin_group for this distribution (multiples allowed).
The failover criteria for when to failover to the secondary origin.
List of HTTP status codes for the origin group.
Ordered member configuration blocks assigned to the origin group, where the first member is the primary origin. You must specify two members.
The restriction configuration for this distribution (maximum one).
No description provided.
ISO 3166-1-alpha-2 codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). If the type is specified as none an empty array can be used.
The SSL configuration for this distribution (maximum one).
THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. This field is planned to replace the DeletionPolicy field in a future release. Currently, both could be set independently and non-default values would be honored if the feature flag is enabled. If both are custom, the DeletionPolicy field will be ignored. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md
ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.
Policies for referencing.
PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.
WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.
DistributionStatus defines the observed state of Distribution.
No description provided.
Extra CNAMEs (alternate domain names), if any, for this distribution.
One or more custom error response elements (multiples allowed).
Default cache behavior for this distribution (maximum one). Requires either cache_policy_id (preferred) or forwarded_values (deprecated) be set.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
A config block that triggers a lambda function with specific actions (maximum 4).
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
The logging configuration that controls how logs are written to your distribution (maximum one).
Ordered list of cache behaviors resource for this distribution. List from top to bottom in order of precedence. The topmost cache behavior will have precedence 0.
Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
Controls whether CloudFront caches the response to requests using the specified HTTP methods.
The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
If you have specified whitelist to forward, the whitelisted cookies that you want CloudFront to forward to your origin.
Headers, if any, that you want CloudFront to vary upon for this cache behavior. Specify * to include all headers.
When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.
A config block that triggers a cloudfront function with specific actions (maximum 2).
A config block that triggers a lambda function with specific actions (maximum 4).
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
One or more origins for this distribution (multiples allowed).
The CloudFront custom origin configuration information. If an S3 origin is required, use origin_access_control_id or s3_origin_config instead.
SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS. A list of one or more of SSLv3, TLSv1, TLSv1.1, and TLSv1.2.
CloudFront Origin Shield configuration information. Using Origin Shield can help reduce the load on your origin. For more information, see Using Origin Shield in the Amazon CloudFront Developer Guide.
CloudFront S3 origin configuration information. If a custom origin is required, use custom_origin_config instead.
One or more origin_group for this distribution (multiples allowed).
The failover criteria for when to failover to the secondary origin.
List of HTTP status codes for the origin group.
Ordered member configuration blocks assigned to the origin group, where the first member is the primary origin. You must specify two members.
The restriction configuration for this distribution (maximum one).
No description provided.
ISO 3166-1-alpha-2 codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). If the type is specified as none an empty array can be used.
List of key group IDs that CloudFront can use to validate signed URLs or signed cookies. See the CloudFront User Guide for more information about this feature.
List of nested attributes for each key group.
Set of CloudFront key pair IDs.
List of AWS account IDs (or self) that you want to allow to create signed URLs for private content. See the CloudFront User Guide for more information about this feature.
List of nested attributes for each key group.
Set of CloudFront key pair IDs.
The SSL configuration for this distribution (maximum one).
Conditions of the resource.
example-distribution
apiVersion: cloudfront.aws.upbound.io/v1beta1
kind: Distribution
metadata:
labels:
testing.upbound.io/example-name: distribution
name: example-distribution
spec:
forProvider:
comment: Some comment
defaultCacheBehavior:
- allowedMethods:
- DELETE
- GET
- HEAD
- OPTIONS
- PATCH
- POST
- PUT
cachedMethods:
- GET
- HEAD
defaultTtl: 3600
forwardedValues:
- cookies:
- forward: none
queryString: false
maxTtl: 86400
minTtl: 0
targetOriginId: customOrigin
viewerProtocolPolicy: allow-all
defaultRootObject: index.html
enabled: true
isIpv6Enabled: true
orderedCacheBehavior:
- allowedMethods:
- GET
- HEAD
- OPTIONS
cachedMethods:
- GET
- HEAD
- OPTIONS
compress: true
defaultTtl: 86400
forwardedValues:
- cookies:
- forward: none
headers:
- Origin
queryString: false
maxTtl: 31536000
minTtl: 0
pathPattern: /content/immutable/*
targetOriginId: customOrigin
viewerProtocolPolicy: redirect-to-https
- allowedMethods:
- GET
- HEAD
- OPTIONS
cachedMethods:
- GET
- HEAD
compress: true
defaultTtl: 3600
forwardedValues:
- cookies:
- forward: none
queryString: false
maxTtl: 86400
minTtl: 0
pathPattern: /content/*
targetOriginId: customOrigin
viewerProtocolPolicy: redirect-to-https
origin:
- customOriginConfig:
- httpPort: 80
httpsPort: 443
originKeepaliveTimeout: 5
originProtocolPolicy: https-only
originReadTimeout: 10
originSslProtocols:
- TLSv1.2
domainName: app.my.cloud
originId: customOrigin
priceClass: PriceClass_200
region: us-west-1
restrictions:
- geoRestriction:
- locations:
- US
- CA
- GB
- DE
restrictionType: whitelist
tags:
Environment: production
viewerCertificate:
- cloudfrontDefaultCertificate: true
© 2022 Upbound, Inc.
Discover the building blocksfor your internal cloud platform.