S3 multi-region access point as CloudFront origin

0

How can an S3 multi-region access point (MRAP) be configured as origin with Origin Access Control (OAC) or Origin Access Identity (OAI) in CloudFront? I tried by using the mrap url as custom origin, but it seems custom origins are not allowed to have an origin access configured.

3回答
0

For cloudfront just use the regional s3 endpoint URL or the global S3 endpoint URL.

I’m not sure if using MRAP provides any functionality with cloudfront.

profile picture
エキスパート
回答済み 5ヶ月前
  • I want the request coming via CloudFront to go to the nearest S3 bucket. For this MRAP is optimal. And for "public" S3 buckets (and MRAP) it works... it just does not work for "private" ones...

0

Not answering the question but here's an alternative solution.

profile pictureAWS
エキスパート
回答済み 5ヶ月前
  • Yes, I know that... but this requires lambda@edge and increases the cost to build a similar routing that MRAP is optimized for :-(

0

Found. Have you configured this way?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html

To use Multi-Region Access Points with Amazon CloudFront, you must configure the Multi-Region Access Point as a Custom Origin distribution type. For more information about various origin types, see Using various origins with CloudFront distributions. For more information about using Multi-Region Access Points with Amazon CloudFront, see Building an active-active, proximity-based application across multiple Regions.

profile picture
エキスパート
回答済み 5ヶ月前
  • That's exactly what I tried. And the problem is custom origins types does not have the option for OAC or OAI... so this unfortunately works only for "public" configured buckets...

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ