Reporting Amazon CloudFront traffic by hostname in one distribution

Question

Customer is using one Amazon CloudFront Distribution to deliver multiple hostname (CNAME).
A challenge is  - it became legacy and person in charge doesn't know whether some of CNAMEs are still used or not.

Is there visibility on traffic (bytes / requests) on host name (host header value)?

Accepted Answer

You can enable [CloudFront Access Logs][1] and analyse them (x-host-header), they can quickly do this with [Athena][2]. You can also have an idea by checking the [Top Referers in CloudFront console][3], logs remain the most precise.

Sample request with Athena

SELECT hostheader as CNAME, count(hostheader) as NbRequests from nameoftable_cflogs WHERE (date BETWEEN date '2020-05-01' AND date '2020-06-14') GROUP BY hostheader

[1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html#LogFileFormat
  [2]: https://docs.aws.amazon.com/athena/latest/ug/cloudfront-logs.html
  [3]: https://console.aws.amazon.com/cloudfront/home?#referers_report:

Reporting Amazon CloudFront traffic by hostname in one distribution

Relevant content