Using alternate domain names and HTTPS

If you want to use your own domain name in the URLs for your files (for example, https://www.example.com/image.jpg) and you want your viewers to use HTTPS, you must complete the steps in this topic. (If you use the default CloudFront distribution domain name in your URLs, for example, https://d111111abcdef8.cloudfront.net/image.jpg, follow the guidance in the following topic instead: Requiring HTTPS for communication between viewers and CloudFront.)

Important

When you add a certificate to your distribution, CloudFront immediately propagates the certificate to all of its edge locations. As new edge locations become available, CloudFront propagates the certificate to those locations, too. You can't restrict the edge locations that CloudFront propagates the certificates to.

Topics

• Choosing how CloudFront serves HTTPS requests
• Requirements for using SSL/TLS certificates with CloudFront
• Quotas on using SSL/TLS certificates with CloudFront (HTTPS between viewers and CloudFront only)
• Configuring alternate domain names and HTTPS
• Determining the size of the public key in an SSL/TLS RSA certificate
• Increasing the quotas for SSL/TLS certificates
• Rotating SSL/TLS certificates
• Reverting from a custom SSL/TLS certificate to the default CloudFront certificate
• Switching from a custom SSL/TLS certificate with dedicated IP addresses to SNI