Amazon CloudFront
Developer Guide (API Version 2016-09-29)

Using Alternate Domain Names and HTTPS

By default, you can deliver your content to viewers over HTTPS by using your CloudFront distribution domain name in your URLs, for example, For more information, see Requiring HTTPS for Communication Between Viewers and CloudFront.

If you want your viewers to use HTTPS and you want to use your own domain name in the URLs for your objects (for example,, you need to perform several additional steps, as explained in this topic.


When you add a certificate to your distribution, CloudFront immediately propagates the certificate to all of its edge locations. As new edge locations become available, CloudFront will propagate the certificate to those locations, too. You can't restrict the edge locations that CloudFront propagates the certificates to.