Use alternate domain names and HTTPS

If you want to use your own domain name in the URLs for your files (for example, https://www.example.com/image.jpg) and you want your viewers to use HTTPS, you must complete the steps in the following topics. (If you use the default CloudFront distribution domain name in your URLs, for example, https://d111111abcdef8.cloudfront.net/image.jpg, follow the guidance in the following topic instead: Require HTTPS for communication between viewers and CloudFront.)

Important

When you add a certificate to your distribution, CloudFront immediately propagates the certificate to all of its edge locations. As new edge locations become available, CloudFront propagates the certificate to those locations, too. You can't restrict the edge locations that CloudFront propagates the certificates to.

Topics

• Choose how CloudFront serves HTTPS requests
• Requirements for using SSL/TLS certificates with CloudFront
• Quotas on using SSL/TLS certificates with CloudFront (HTTPS between viewers and CloudFront only)
• Configure alternate domain names and HTTPS
• Determine the size of the public key in an SSL/TLS RSA certificate
• Increase the quotas for SSL/TLS certificates
• Rotate SSL/TLS certificates
• Revert from a custom SSL/TLS certificate to the default CloudFront certificate
• Switch from a custom SSL/TLS certificate with dedicated IP addresses to SNI