CloudFront and ALB Integration

Question

CloudFront - ALB - EC2(Wordpress)
                     - S3 (OAI)

I'm trying to configure something like the above. But there are some problems.
[ACM: example.com, *.example.com]
HTTPS communication using CloudFront's CNAME and ACM(N.Virginia) + ALB's ACM(Asia/Seoul).
With this configuration, a 502 error occurs when connecting to the xxxx.cloudfront.net domain of CloudFront.
Conversely, if I register the example.com - xxxx.cloudfront.net A record in Route53 and access the A record, the page loads normally.

Please tell me the answer to the problem.

CloudFront and ALB Integration
Please tell me the answer to the problem.

Franky Chen · Answer

Hello,

When you setup HTTPS origin in CloudFront, the certificate returned from the origin must be valid and include one of the following domain names:
- The domain name in the origin’s Origin domain field (the DomainName field in the CloudFront API).
- The domain name in the Host header, if the cache behavior is configured to forward the Host header to the origin.

Please refer to this document for further information: https://go.aws/3Q0VBuR

Regards,  
Franky Chen

CloudFront and ALB Integration

Relevant content