S3 multi-region access point as CloudFront origin

0

How can an S3 multi-region access point (MRAP) be configured as origin with Origin Access Control (OAC) or Origin Access Identity (OAI) in CloudFront? I tried by using the mrap url as custom origin, but it seems custom origins are not allowed to have an origin access configured.

3 個答案
0

For cloudfront just use the regional s3 endpoint URL or the global S3 endpoint URL.

I’m not sure if using MRAP provides any functionality with cloudfront.

profile picture
專家
已回答 5 個月前
  • I want the request coming via CloudFront to go to the nearest S3 bucket. For this MRAP is optimal. And for "public" S3 buckets (and MRAP) it works... it just does not work for "private" ones...

0

Not answering the question but here's an alternative solution.

profile pictureAWS
專家
已回答 5 個月前
  • Yes, I know that... but this requires lambda@edge and increases the cost to build a similar routing that MRAP is optimized for :-(

0

Found. Have you configured this way?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html

To use Multi-Region Access Points with Amazon CloudFront, you must configure the Multi-Region Access Point as a Custom Origin distribution type. For more information about various origin types, see Using various origins with CloudFront distributions. For more information about using Multi-Region Access Points with Amazon CloudFront, see Building an active-active, proximity-based application across multiple Regions.

profile picture
專家
已回答 5 個月前
  • That's exactly what I tried. And the problem is custom origins types does not have the option for OAC or OAI... so this unfortunately works only for "public" configured buckets...

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南