How do I resolve "403 ERROR - The request could not be satisfied. Bad Request" in CloudFront?

3 minute read

Amazon CloudFront is returning the error message "403 ERROR - The request could not be satisfied. Bad Request."

Short description

The error message "403 ERROR - The request could not be satisfied. Bad Request." is from the client. This error can occur due to one of the following reasons:

The request is initiated over HTTP, but the CloudFront distribution is configured to allow only HTTPS requests. To resolve this issue, follow the steps in the Allow HTTP requests Resolution section.
The requested alternate domain name (CNAME) isn't associated with the CloudFront distribution. To resolve this issue, follow the steps in the Associate a CNAME with a distribution Resolution section.

Note: This resolution is for troubleshooting the error when you own the application or website that uses CloudFront to serve content to end users. If you receive this error when trying to view an application or access a website, then contact the provider or website owner for assistance.

For information on troubleshooting other types of 403 errors, see How do I troubleshoot 403 errors from CloudFront?

Resolution

Allow HTTP requests

Follow these steps:

Open the Amazon CloudFront console.
Choose the distribution that's returning the Bad Request error.
Choose the Behaviors tab.
Choose the behavior that matches the request. Then, choose Edit.
For Viewer Protocol Policy, choose either HTTP and HTTPS or Redirect HTTP to HTTPS.
Note: HTTP and HTTPS allows connections on both HTTP and HTTPS. Redirect HTTP to HTTPS automatically redirects HTTP requests to HTTPS.
Choose Save Changes.

Associate a CNAME with a distribution

Follow these steps:

Open the Amazon CloudFront console.
Choose the distribution that's returning the Bad Request error.
Choose the General tab.
Under Settings, choose Edit.
For Alternate Domain Names (CNAMEs), select Add Item.
Enter the CNAME that you want to associate with the CloudFront distribution.
Under Custom SSL certificate, choose the certificate that covers the domain. For more information, see How do I configure my CloudFront distribution to use an SSL/TLS certificate?
Note: An SSL certificate is required to associate a CNAME with a distribution. For more information see, Requirements for using alternate domain names.
Choose Save changes.