aws-cdk-lib.aws_cloudfront.S3OriginConfig

S3OriginConfig Struct

S3 origin configuration for CloudFront.

Source

aws-cloudfront/lib/web-distribution.ts

Type last changed

v2.234.0 · 8 Jan 2026

Example

declare const sourceBucket: s3.Bucket;
const viewerCertificate = cloudfront.ViewerCertificate.fromIamCertificate('MYIAMROLEIDENTIFIER', {
  aliases: ['MYALIAS'],
});

new cloudfront.CloudFrontWebDistribution(this, 'MyCfWebDistribution', {
  originConfigs: [
    {
      s3OriginSource: {
        s3BucketSource: sourceBucket,
      },
      behaviors : [ {isDefaultBehavior: true} ],
    },
  ],
  viewerCertificate: viewerCertificate,
});

Properties

originAccessIdentityanyorigin_access_identityanyoriginAccessIdentityanyOriginAccessIdentityanyOriginAccessIdentityany= No Origin Access Identity which …#

The optional Origin Access Identity of the origin identity cloudfront will use when calling your s3 bucket.

default

Default: No Origin Access Identity which requires the S3 bucket to be public accessible

originHeaders{ [key: string]: string }origin_headerstyping.Mapping[str, str]originHeadersMap<String, String>OriginHeadersIDictionary<string, string>OriginHeaders*map[string]*string= No additional headers are passed…#

Any additional headers to pass to the origin.

default

Default: No additional headers are passed.

originPathstringorigin_pathstroriginPathStringOriginPathstringOriginPath*string= /#

The relative path to the origin root to use for sources.

originShieldRegionstringorigin_shield_regionstroriginShieldRegionStringOriginShieldRegionstringOriginShieldRegion*string= origin shield not enabled#

When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance.

s3BucketSourceIBuckets3_bucket_sourceIBuckets3BucketSourceIBucketS3BucketSourceIBucketS3BucketSourceIBucketrequired#

The source bucket to serve content from.