AWS::CloudFront::Distribution OriginShield - AWS CloudFormation

AWS::CloudFront::Distribution OriginShield

CloudFront Origin Shield.

Using Origin Shield can help reduce the load on your origin. For more information, see Using Origin Shield in the Amazon CloudFront Developer Guide.


To declare this entity in your AWS CloudFormation template, use the following syntax:


{ "Enabled" : Boolean, "OriginShieldRegion" : String }


Enabled: Boolean OriginShieldRegion: String



A flag that specifies whether Origin Shield is enabled.

When it's enabled, CloudFront routes all requests through Origin Shield, which can help protect your origin. When it's disabled, CloudFront might send requests directly to your origin from multiple edge locations or regional edge caches.

Required: No

Type: Boolean

Update requires: No interruption


The AWS Region for Origin Shield.

Specify the AWS Region that has the lowest latency to your origin. To specify a region, use the region code, not the region name. For example, specify the US East (Ohio) region as us-east-2.

When you enable CloudFront Origin Shield, you must specify the AWS Region for Origin Shield. For the list of AWS Regions that you can specify, and for help choosing the best Region for your origin, see Choosing the AWS Region for Origin Shield in the Amazon CloudFront Developer Guide.

Required: No

Type: String

Pattern: [a-z]{2}-[a-z]+-\d

Minimum: 1

Maximum: 32

Update requires: No interruption