Cloudfront Authorization Header

Question

When creating a cache policy in Cloudfront, I am able to select Authorization headers. Are all of the values in the authorization headers used as part of the cache key? For example will it use the oauth_nonce as part of the cache key?

Is there any way to only have it cache based on the oauth_consumer_key and oauth_token only?

Answer

For those playing along at home, this is in reference to how you can include specific headers in the CloudFront cache key: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html

Anyway: When you select a header to use, CloudFront uses the whole header, not just parts of it.

Cloudfront Authorization Header

Relevant content