S3 multi-region access point as CloudFront origin

0

How can an S3 multi-region access point (MRAP) be configured as origin with Origin Access Control (OAC) or Origin Access Identity (OAI) in CloudFront? I tried by using the mrap url as custom origin, but it seems custom origins are not allowed to have an origin access configured.

3 Answers
0

For cloudfront just use the regional s3 endpoint URL or the global S3 endpoint URL.

I’m not sure if using MRAP provides any functionality with cloudfront.

profile picture
EXPERT
answered 4 months ago
  • I want the request coming via CloudFront to go to the nearest S3 bucket. For this MRAP is optimal. And for "public" S3 buckets (and MRAP) it works... it just does not work for "private" ones...

0

Not answering the question but here's an alternative solution.

profile pictureAWS
EXPERT
answered 4 months ago
  • Yes, I know that... but this requires lambda@edge and increases the cost to build a similar routing that MRAP is optimized for :-(

0

Found. Have you configured this way?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html

To use Multi-Region Access Points with Amazon CloudFront, you must configure the Multi-Region Access Point as a Custom Origin distribution type. For more information about various origin types, see Using various origins with CloudFront distributions. For more information about using Multi-Region Access Points with Amazon CloudFront, see Building an active-active, proximity-based application across multiple Regions.

profile picture
EXPERT
answered 4 months ago
  • That's exactly what I tried. And the problem is custom origins types does not have the option for OAC or OAI... so this unfortunately works only for "public" configured buckets...

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions