Is it possible to view the cloudformation of managed Response Headers Policies?

0

I need to enhance a ManagedSecurityPolicy and add more to it, but I can't view the actual cloudformation. Is it possible to do this?

I am looking at the policy Policy ID: 67f7725c-6f97-4210-82d7-5512b31e9d03 at https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-response-headers-policies.html

This managed one is good but it is missing Content Security Policy items which I want to add on.

1回答
2
承認された回答

You will need to create your own custom policy. You can describe the managed policy in the CLI to get the JSON output that you can use in your custom policy in CloudFormation

See:

aws cloudfront get-response-headers-policy --id 67f7725c-6f97-4210-82d7-5512b31e9d03

{
    "ETag": "E23ZP02F085DFQ",
    "ResponseHeadersPolicy": {
        "Id": "67f7725c-6f97-4210-82d7-5512b31e9d03",
        "LastModifiedTime": "1970-01-01T00:00:00+00:00",
        "ResponseHeadersPolicyConfig": {
            "Comment": "Adds a set of security headers to every response",
            "Name": "Managed-SecurityHeadersPolicy",
            "SecurityHeadersConfig": {
                "XSSProtection": {
                    "Override": false,
                    "Protection": true,
                    "ModeBlock": true
                },
                "FrameOptions": {
                    "Override": false,
                    "FrameOption": "SAMEORIGIN"
                },
                "ReferrerPolicy": {
                    "Override": false,
                    "ReferrerPolicy": "strict-origin-when-cross-origin"
                },
                "ContentSecurityPolicy": {},
                "ContentTypeOptions": {
                    "Override": true
                },
                "StrictTransportSecurity": {
                    "Override": false,
                    "AccessControlMaxAgeSec": 31536000
                }
            }
        }
    }
}
profile pictureAWS
エキスパート
Matt-B
回答済み 2年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ