S3 multi-region access point as CloudFront origin

0

How can an S3 multi-region access point (MRAP) be configured as origin with Origin Access Control (OAC) or Origin Access Identity (OAI) in CloudFront? I tried by using the mrap url as custom origin, but it seems custom origins are not allowed to have an origin access configured.

3개 답변
0

For cloudfront just use the regional s3 endpoint URL or the global S3 endpoint URL.

I’m not sure if using MRAP provides any functionality with cloudfront.

profile picture
전문가
답변함 5달 전
  • I want the request coming via CloudFront to go to the nearest S3 bucket. For this MRAP is optimal. And for "public" S3 buckets (and MRAP) it works... it just does not work for "private" ones...

0

Not answering the question but here's an alternative solution.

profile pictureAWS
전문가
답변함 5달 전
  • Yes, I know that... but this requires lambda@edge and increases the cost to build a similar routing that MRAP is optimized for :-(

0

Found. Have you configured this way?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html

To use Multi-Region Access Points with Amazon CloudFront, you must configure the Multi-Region Access Point as a Custom Origin distribution type. For more information about various origin types, see Using various origins with CloudFront distributions. For more information about using Multi-Region Access Points with Amazon CloudFront, see Building an active-active, proximity-based application across multiple Regions.

profile picture
전문가
답변함 5달 전
  • That's exactly what I tried. And the problem is custom origins types does not have the option for OAC or OAI... so this unfortunately works only for "public" configured buckets...

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인