Cloudfront theshold for outbound traffic

Question

HI,
Is there a way to limit outbound traffic from a CloudFront distribution with s3 as the origin? A way to set a threshold for outbound traffic from Cloudfront to users.
In fact, all requests arriving at the edges could still be valid (no ddos ​​attack) but could increase the estimated costs of my CloudFront distribution. I don't want to use billing alerts or Cloudfront traffic alerts from Cloudwatch..
Is there a Cloudfront option to achieve this? Can it be useful to use lambda@edge to count outgoing traffic and block unwanted excess?

Thanks

NARRAVULA MUNI SAI TEJA · Accepted Answer

Hello,

CloudFront itself can't limit outbound traffic, but here are two options there as follows:

**1. WAF with Rate Limiting:** Throttle requests based on users/locations using AWS WAF integrated with CloudFront.

* AWS WAF: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html

**2.Lambda@Edge with SQS:** Track request counts and block excess using a Lambda@Edge function and SQS queue.

* Lambda@Edge: https://aws.amazon.com/lambda/edge/
* SQS: https://aws.amazon.com/sqs/getting-started/

Consider costs and choose the approach that best suits your needs. Billing alerts and CloudWatch metrics are still recommended for monitoring usage.

Cloudfront theshold for outbound traffic

Add your answer

Relevant content