How do I resolve the error "CloudFront wasn't able to connect to the origin"?

Resolution

HTTP 502 errors from CloudFront can occur because of the following reasons:

• There's an SSL negotiation failure because the origin is using SSL/TLS protocols and ciphers that aren't supported by CloudFront.
• There's an SSL negotiation failure because the SSL certificate on the origin is expired or invalid, or because the certificate chain is invalid.
• There's a host header mismatch in the SSL negotiation between your CloudFront distribution and the custom origin.
• The custom origin isn't responding on the ports specified in the origin settings of the CloudFront distribution.
• The custom origin is ending the connection to CloudFront too quickly.

For detailed instructions on how to troubleshoot these issues, see HTTP 502 status code (Bad Gateway).

Related information

Troubleshooting error responses from your origin

How do I troubleshoot a 502: "The request could not be satisfied" error from CloudFront?