SigningBehavior

class aws_cdk.aws_cloudfront.SigningBehavior(value, names=None, *, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: Enum

Options for which requests CloudFront signs.

The recommended setting is always.

Attributes

ALWAYS

Sign all origin requests, overwriting the Authorization header from the viewer request if one exists.

NEVER

Do not sign any origin requests.

This value turns off origin access control for all origins in all distributions that use this origin access control.

NO_OVERRIDE

Sign origin requests only if the viewer request doesn’t contain the Authorization header.