Module types 

Domain types for CloudFront resources.

The types here form a minimal but faithful representation of the wire schema. Each resource record is a single struct that owns its configuration plus bookkeeping (ETag, timestamps, status, etc.). Optional fields that CloudFront always emits (even as <Quantity>0</Quantity>) are modelled as Vec<T> rather than Option<Vec<T>> so the XML renderer can use the same code path for “present but empty” and “present with items”.

Structs

AliasIcpRecordal

Alternate-domain ICP recordal entry (PRC compliance).

CacheBehavior

Cache behavior (default or prefixed).

CachePolicy

Cache policy record.

CachePolicyConfig

Cache policy configuration.

CachePolicyCookiesConfig

Cookie cache-key configuration.

CachePolicyHeadersConfig

Header cache-key configuration.

CachePolicyQueryStringsConfig

Query-string cache-key configuration.

CloudFrontFunction

CloudFront Function record.

CloudFrontOriginAccessIdentity

CloudFront Origin Access Identity (legacy — still used by Terraform).

CloudFrontOriginAccessIdentityConfig

OAI configuration.

ContentSecurityPolicy

Content-Security-Policy.

ContentTypeOptions

X-Content-Type-Options.

CookiePreference

Cookie forwarding configuration.

CustomErrorResponse

Custom error response override.

CustomHeader

Arbitrary HTTP header (name, value) pair.

CustomOriginConfig

Custom (HTTP) origin configuration.

Distribution

Full distribution record persisted in the store.

DistributionConfig

Distribution configuration.

EndPoint

Endpoint for realtime log shipping.

FieldLevelEncryption

FLE configuration record.

FieldLevelEncryptionConfig

FLE config.

FieldLevelEncryptionProfile

FLE profile record.

FieldLevelEncryptionProfileConfig

FLE profile config.

ForwardedValues

Legacy forwarded-values configuration (pre-CachePolicy).

FrameOptions

X-Frame-Options.

FunctionAssociation

CloudFront Function association entry.

FunctionConfig

Function configuration.

FunctionMetadata

Function metadata.

GeoRestriction

Geo restriction details.

Invalidation

Invalidation record.

InvalidationBatch

Invalidation batch input.

KeyGroup

Key group record.

KeyGroupConfig

Key group configuration.

KeyValueStore

KVStore record.

KinesisStreamConfig

Kinesis stream config for realtime logging.

LambdaFunctionAssociation

Lambda@Edge association entry.

LoggingConfig

Access-log configuration.

MonitoringSubscription

Monitoring subscription record.

Origin

CloudFront origin.

OriginAccessControl

Origin Access Control record.

OriginAccessControlConfig

Origin Access Control configuration.

OriginGroup

Origin group (primary/failover).

OriginRequestPolicy

Origin request policy record.

OriginRequestPolicyConfig

Origin request policy config.

OriginRequestPolicyCookiesConfig

Origin request cookies config.

OriginRequestPolicyHeadersConfig

Origin request headers config.

OriginRequestPolicyQueryStringsConfig

Origin request query-strings config.

OriginShield

Origin Shield configuration.

ParamsInCacheKey

Parameters controlling cache-key composition.

PublicKey

Public key record.

PublicKeyConfig

Public key configuration.

RealtimeLogConfig

Realtime log config record.

ReferrerPolicy

Referrer-Policy.

ResponseHeaderOverride

Single custom header override entry.

ResponseHeadersPolicy

Response headers policy record.

ResponseHeadersPolicyConfig

Response headers policy configuration.

ResponseHeadersPolicyCorsConfig

CORS config portion of a response headers policy.

ResponseHeadersPolicySecurityHeadersConfig

Security header configuration.

Restrictions

Geo restriction settings.

S3OriginConfig

S3 origin configuration.

ServerTimingHeadersConfig

Server-Timing header config.

StrictTransportSecurity

Strict-Transport-Security.

TenantConfigParameter

Tenant config parameter (for tenant-only distributions).

ViewerCertificate

Viewer certificate settings.

VpcOriginConfig

VPC origin configuration.

XssProtection

XSS protection header.

Enums

ResourceStatus

Distribution / invalidation lifecycle states.