Lambda@Edge function Fails to Execute using Viewer Request Trigger from Cloudfront

1

My function does not seem to ever execute on accessing my website through the cloudfront servers. Testing the function works as expected, and creates logs in cloudwatch as expected, but I have not been able to trigger the function from Cloudfront.

I followed the instructions from this blog https://levelup.gitconnected.com/nonce-based-csp-with-aws-cloudfront-ae5a6752b9b0

I'm wondering if I'm missing a permission issue or something, but I can't figure it out.

Any help is appreciated

Here are the trust relationships and permissions, respectively

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": [
                    "edgelambda.amazonaws.com",
                    "lambda.amazonaws.com"
                ]
            },
            "Action": "sts:AssumeRole"
        }
    ]
}
{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": "logs:CreateLogGroup",
			"Resource": "arn:aws:logs:xxxxx:*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"logs:CreateLogStream",
				"logs:PutLogEvents"
			],
			"Resource": [
				"arn:aws:logs:xxxxx:*"
			]
		},
		{
			"Action": "s3:GetObject",
			"Effect": "Allow",
			"Resource": "*"
		}
	]
}

Thanks,

Liam

Liam
質問済み 1年前373ビュー
2回答
0

Hi.

Your permissions looks correct. Could you share what your lambda association in cloudfront looks like? On which event have you associated you Lambda function? Have you checked logs for the function in all regions? When Lambda@edge runs logs will be in the region closest to the Cloudfront POP you are hitting.

profile picture
エキスパート
回答済み 1年前
0

I have similar issue, I have no idea why it is not triggering and there are no logs to find out.

Sateesh
回答済み 3ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ