Amazon CloudFront
Developer Guide (API Version 2016-09-29)

Using Alternate Domain Names and HTTPS

If you want your viewers to use HTTPS and you want to use your own domain name in the URLs for your objects (for example,, you need to perform several additional steps, as explained in this topic. If you simply use your CloudFront distribution domain name in your URLs, for example,, follow the guidance in the following topic instead: Requiring HTTPS for Communication Between Viewers and CloudFront.


When you add a certificate to your distribution, CloudFront immediately propagates the certificate to all of its edge locations. As new edge locations become available, CloudFront will propagate the certificate to those locations, too. You can't restrict the edge locations that CloudFront propagates the certificates to.