Distribution Viewer Certificate
Constructors
Properties
ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Specify this, cloudfront_default_certificate
, or iam_certificate_id
. The ACM certificate must be in US-EAST-1.
true
if you want viewers to use HTTPS to request your objects and you're using the CloudFront domain name for your distribution. Specify this, acm_certificate_arn
, or iam_certificate_id
.
IAM certificate identifier of the custom viewer certificate for this distribution if you are using a custom domain. Specify this, acm_certificate_arn
, or cloudfront_default_certificate
.
Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Can only be set if cloudfront_default_certificate = false
. See all possible values in this table under "Security policy." Some examples include: TLSv1.2_2019
and TLSv1.2_2021
. Default: TLSv1
. NOTE: If you are using a custom certificate (specified with acm_certificate_arn
or iam_certificate_id
), and have specified sni-only
in ssl_support_method
, TLSv1
or later must be specified. If you have specified vip
in ssl_support_method
, only SSLv3
or TLSv1
can be specified. If you have specified cloudfront_default_certificate
, TLSv1
must be specified.
How you want CloudFront to serve HTTPS requests. One of vip
or sni-only
. Required if you specify acm_certificate_arn
or iam_certificate_id
. NOTE: vip
causes CloudFront to use a dedicated IP address and may incur extra charges.