Skip to main content

Module policies

Module policies 

Source
Expand description

Origin Access Control + the four policy resources (cache, origin request, response headers, continuous deployment). Models are defined here and the [CloudFrontService] handlers live in this module too — service.rs only dispatches by action name.

AWS-managed policies for CachePolicy, OriginRequestPolicy, and ResponseHeadersPolicy are pre-seeded by seed_managed so Terraform / CDK code that looks them up by their well-known IDs resolves them without the caller having to create them first.

Structs§

CachePolicyConfig
CachePolicyCookiesConfig
CachePolicyHeadersConfig
CachePolicyQueryStringsConfig
ContentSecurityPolicy
ContentTypeOptions
ContinuousDeploymentPolicyConfig
ContinuousDeploymentSingleHeaderConfig
ContinuousDeploymentSingleWeightConfig
FrameOptions
NameItems
NameWrapper
OriginAccessControlConfig
OriginRequestPolicyConfig
OriginRequestPolicyCookiesConfig
OriginRequestPolicyHeadersConfig
OriginRequestPolicyQueryStringsConfig
ParametersInCacheKeyAndForwardedToOrigin
ReferrerPolicy
ResponseHeadersPolicyAccessControlAllowMethods
ResponseHeadersPolicyConfig
ResponseHeadersPolicyCorsConfig
ResponseHeadersPolicyCustomHeader
ResponseHeadersPolicyCustomHeaderItems
ResponseHeadersPolicyCustomHeadersConfig
ResponseHeadersPolicyMethodItems
ResponseHeadersPolicyRemoveHeader
ResponseHeadersPolicyRemoveHeaderItems
ResponseHeadersPolicyRemoveHeadersConfig
ResponseHeadersPolicySecurityHeadersConfig
ResponseHeadersPolicyServerTimingHeadersConfig
SessionStickinessConfig
StagingDistributionDnsNameItems
StagingDistributionDnsNames
StoredCachePolicy
StoredContinuousDeploymentPolicy
StoredOriginAccessControl
StoredOriginRequestPolicy
StoredResponseHeadersPolicy
StrictTransportSecurity
TrafficConfig
XssProtection

Functions§

seed_managed
Pre-populate AWS-managed policies. Called once per account on first touch from CloudFrontService. Mirrors the IDs / names AWS returns from aws cloudfront list-cache-policies --type managed so Terraform / CDK lookups by well-known ID resolve.