HTTP 400 status code (Bad Request) - Amazon CloudFront

HTTP 400 status code (Bad Request)

Your CloudFront distribution might send error responses with HTTP status code 400 Bad Request, and a message similar to the following:

The authorization header is malformed; the region '<AWS Region>' is wrong; expecting '<AWS Region>'

For example:

The authorization header is malformed; the region 'us-east-1' is wrong; expecting 'us-west-2'

This problem can occur in the following scenario:

  1. Your CloudFront distribution's origin is an Amazon S3 bucket.

  2. You moved the S3 bucket from one AWS Region to another. That is, you deleted the S3 bucket, then later you created a new bucket with the same bucket name, but in a different AWS Region than where the original S3 bucket was located.

To fix this error, update your CloudFront distribution so that it finds the S3 bucket in the bucket's current AWS Region.

To update your CloudFront distribution
  1. Sign in to the AWS Management Console and open the CloudFront console at

  2. Choose the distribution that produces this error.

  3. Choose Origins and Origin Groups.

  4. Find the origin for the S3 bucket that you moved. Select the check box next to this origin, then choose Edit.

  5. Choose Yes, Edit. You do not need to change any settings before choosing Yes, Edit.

When you complete these steps, CloudFront redeploys your distribution. While the distribution is deploying, you see the Deploying status under the Last modified column. Some time after the deployment is complete, you should stop receiving the AuthorizationHeaderMalformed error responses.