AWS CDK Reference

Appearance

v2.273.0

ViewerCertificate Class ​

Viewer certificate configuration class.

Source
aws-cloudfront/lib/web-distribution.ts
Type last changed
v2.235.0 · 15 Jan 2026

Example ​

ts
    const s3BucketSource = new s3.Bucket(this, 'Bucket');

    const distribution = new cloudfront.CloudFrontWebDistribution(this, 'AnAmazingWebsiteProbably', {
      originConfigs: [{
        s3OriginSource: { s3BucketSource },
        behaviors: [{ isDefaultBehavior: true }],
      }],
      viewerCertificate: cloudfront.ViewerCertificate.fromIamCertificate(
        'certificateId',
        {
          aliases: ['example.com'],
          securityPolicy: cloudfront.SecurityPolicyProtocol.SSL_V3, // default
          sslMethod: cloudfront.SSLMethod.SNI, // default
        },
      ),
    });

Properties ​

aliasesstring[]aliasestyping.List[str]aliasesList<String>Aliasesstring[]Aliases*[]*stringrequired#

Methods ​

fromAcmCertificate(certificate: ICertificateRef, options?: ViewerCertificateOptions): ViewerCertificate // chainable@staticmethod def from_acm_certificate(certificate: ICertificateRef, options: typing.Optional[ViewerCertificateOptions] = None) -> ViewerCertificatepublic static ViewerCertificate fromAcmCertificate(ICertificateRef certificate, ViewerCertificateOptions options)public static ViewerCertificate FromAcmCertificate(ICertificateRef certificate, ViewerCertificateOptions? options = null)func FromAcmCertificate(Certificate ICertificateRef, Options ViewerCertificateOptions) ViewerCertificatestatic#
Generate an AWS Certificate Manager (ACM) viewer certificate configuration.
2 parameters

Parameters

  • certificatecertificatecertificatecertificateCertificate — AWS Certificate Manager (ACM) certificate.
  • optionsoptionsoptionsoptionsOptions — certificate configuration options.
fromCloudFrontDefaultCertificate(...aliases: string[]): ViewerCertificate // chainable@staticmethod def from_cloud_front_default_certificate(aliases: str) -> ViewerCertificatepublic static ViewerCertificate fromCloudFrontDefaultCertificate(String aliases)public static ViewerCertificate FromCloudFrontDefaultCertificate(string aliases)func FromCloudFrontDefaultCertificate(Aliases *string) ViewerCertificatestatic#
Generate a viewer certificate configuration using the CloudFront default certificate (e.g. d111111abcdef8.cloudfront.net) and a `SecurityPolicyProtocol.TLS_V1` security policy.
1 parameter

Parameters

  • aliasesaliasesaliasesaliasesAliases — Alternative CNAME aliases You also must create a CNAME record with your DNS service to route queries.
fromIamCertificate(iamCertificateId: string, options?: ViewerCertificateOptions): ViewerCertificate // chainable@staticmethod def from_iam_certificate(iam_certificate_id: str, options: typing.Optional[ViewerCertificateOptions] = None) -> ViewerCertificatepublic static ViewerCertificate fromIamCertificate(String iamCertificateId, ViewerCertificateOptions options)public static ViewerCertificate FromIamCertificate(string iamCertificateId, ViewerCertificateOptions? options = null)func FromIamCertificate(IamCertificateId *string, Options ViewerCertificateOptions) ViewerCertificatestatic#
Generate an IAM viewer certificate configuration.
2 parameters

Parameters

  • iamCertificateIdiam_certificate_idiamCertificateIdiamCertificateIdIamCertificateId — Identifier of the IAM certificate.
  • optionsoptionsoptionsoptionsOptions — certificate configuration options.