CloudFront host headers rejected by ISTIO

Question

My customer is using ISTIO as the service mesh in EKS.

They are presented with an issue whenever they try to call a service in the EKS cluster using a CloudFront distribution from a different AWS account as the host header is rejected by ISTIO.

Do you know if there’s any way to change the Host Header in CloudFront to mimic that of the certified domain name in the AWS EKS account i.e. an alias, or custom header?

Accepted Answer

You can use Lambda@Edge to change the host header on the forward request to the origin.

Please see the following example code. 
Example: Using an Origin-Request Trigger to Change From an Amazon S3 Origin to a Custom Origin
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html#lambda-examples-content-based-custom-origin-request-trigger

CloudFront host headers rejected by ISTIO

Contenido relevante