Amazon CloudFront
Developer Guide (API Version 2016-09-29)

Using Alternate Domain Names and HTTPS

If you want to use your own domain name in the URLs for your objects (for example, and you want your viewers to use HTTPS, you must complete the additional steps that are described in this topic. (If you use the default CloudFront distribution domain name in your URLs, for example,, follow the guidance in the following topic instead: Requiring HTTPS for Communication Between Viewers and CloudFront.)


When you add a certificate to your distribution, CloudFront immediately propagates the certificate to all of its edge locations. As new edge locations become available, CloudFront will propagate the certificate to those locations, too. You can't restrict the edge locations that CloudFront propagates the certificates to.