Developer Guide API Version 2014-01-31 - Amazon Web Services

382 Pages·2016·4.41 MB·English

Amazon CloudFront
Developer Guide
API Version 2016-08-01
Amazon CloudFront Developer Guide
Amazon CloudFront: Developer Guide
Copyright © 2016 Amazon Web Services, Inc. and/or its affiliates. All rights reserved.
Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner
that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not
owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by
Amazon.
Amazon CloudFront Developer Guide
Table of Contents
What Is Amazon CloudFront?.......................................................................................................... 1
How CloudFront Delivers Content............................................................................................. 4
Locations and IP Address Ranges of CloudFront Edge Servers..................................................... 6
PCI DSS Compliance............................................................................................................. 6
AWS Billing and Usage Reports for CloudFront................................................................................... 8
AWS Billing Report for CloudFront.......................................................................................... 10
AWS Usage Report for CloudFront ......................................................................................... 11
Interpreting Your AWS Bill and the AWS Usage Report for CloudFront........................................... 12
CloudFront Reports...................................................................................................................... 15
CloudFront Cache Statistics Reports....................................................................................... 16
Downloading Data in CSV Format .................................................................................. 17
How Cache Statistics Charts Are Related to Data in the CloudFront Access Logs................... 19
CloudFront Popular Objects Report......................................................................................... 20
Downloading Data in CSV Format .................................................................................. 21
How Data in the Popular Objects Report Is Related to Data in the CloudFront Access Logs...... 22
CloudFront Top Referrers Report............................................................................................ 23
Downloading Data in CSV Format .................................................................................. 24
How Data in the Top Referrers Report Is Related to Data in the CloudFront Access Logs......... 25
CloudFront Usage Reports.................................................................................................... 25
Downloading Data in CSV Format .................................................................................. 26
How the Usage Charts Are Related to Data in the CloudFront Usage Report.......................... 28
CloudFront Viewers Reports .................................................................................................. 29
Displaying Viewers Charts and Reports........................................................................... 30
Downloading Data in CSV Format .................................................................................. 31
How Data in the Locations Report Is Related to Data in the CloudFront Access Logs............... 35
Getting Started............................................................................................................................ 37
Step 1: Sign up for Amazon Web Services................................................................................ 37
Step 2: Upload your content to Amazon S3 and grant object permissions...................................... 38
Step 3: Create a CloudFront Web Distribution........................................................................... 39
Step 4:Test your links........................................................................................................... 45
Working with Distributions ............................................................................................................. 46
Overview of Web and RTMP Distributions................................................................................ 47
Web Distributions ........................................................................................................ 47
RTMP Distributions ...................................................................................................... 48
Creating Web and RTMP Distributions..................................................................................... 48
Listing, Viewing, and Updating CloudFront Distributions.............................................................. 48
Deleting a Distribution .......................................................................................................... 49
Using Alternate Domain Names (CNAMEs).............................................................................. 50
Using the * Wildcard in Alternate Domain Names.............................................................. 50
Restrictions on Using Alternate Domain Names................................................................ 51
Adding an Alternate Domain Name................................................................................. 51
Choosing the Price Class for a CloudFront Distribution............................................................... 54
Using CloudFront with Amazon S3.......................................................................................... 54
Adding CloudFront When You're Distributing Content from Amazon S3.................................. 55
Moving an Amazon S3 Bucket to a Different Region........................................................... 56
Changes to the CloudFront API.............................................................................................. 56
Working with Web Distributions...................................................................................................... 58
Task List for Creating a Web Distribution.................................................................................. 58
Creating or Updating a Web Distribution Using the CloudFront Console......................................... 59
Testing Your Web Distribution................................................................................................. 60
Using Amazon S3 Origins and Custom Origins for Web Distributions............................................ 61
Using Amazon S3 Buckets for Your Origin........................................................................ 61
Using Amazon EC2 or Other Custom Origins.................................................................... 62
Values that You Specify When You Create or Update a Web Distribution........................................ 63
Delivery Method .......................................................................................................... 64
API Version 2016-08-01
iii
Amazon CloudFront Developer Guide
Origin Settings ............................................................................................................ 64
Cache Behavior Settings............................................................................................... 68
Distribution Details....................................................................................................... 75
Custom Error Pages and Error Caching........................................................................... 79
Restrictions ................................................................................................................ 79
Values that CloudFront Displays in the Console When You Create or Update a Web Distribution........ 80
Distribution ID (General Tab).......................................................................................... 80
Distribution Status (General Tab).................................................................................... 80
Last Modified (General Tab)........................................................................................... 81
Domain Name (General Tab) ......................................................................................... 81
Requirements and Recommendations for Using Amazon EC2 and Other Custom Origins................ 81
Using AWS WAF to Control Access to Your Content................................................................... 82
Restricting the Geographic Distribution of Your Content.............................................................. 82
Using CloudFront Geo Restriction................................................................................... 83
Using a Third-Party Geolocation Service.......................................................................... 84
Configuring On-Demand Smooth Streaming............................................................................. 85
Configuring On-Demand Progressive Downloads...................................................................... 86
Configuring On-Demand Apple HTTP Live Streaming (HLS)....................................................... 86
Working with RTMP Distributions.................................................................................................... 87
How RTMP Distributions Work ............................................................................................... 87
Task List for Streaming Media Files Using RTMP....................................................................... 89
Creating an RTMP Distribution Using the CloudFront Console..................................................... 90
Values that You Specify When You Create or Update an RTMP Distribution.................................... 90
Origin Domain Name (Amazon S3 Bucket)....................................................................... 91
Restrict Bucket Access (Amazon S3 Only)....................................................................... 92
Origin Access Identity (Amazon S3 Only)......................................................................... 92
Comment for New Identity(Amazon S3 Only).................................................................... 92
Your Identities (Amazon S3 Only)................................................................................... 92
Grant Read Permissions on Bucket (Amazon S3 Only)....................................................... 92
Price Class................................................................................................................. 92
Alternate Domain Names (CNAMEs)............................................................................... 93
Logging ..................................................................................................................... 93
Bucket for Logs ........................................................................................................... 93
Log Prefix................................................................................................................... 93
Comment ................................................................................................................... 93
Distribution State ......................................................................................................... 93
Restrict Viewer Access (Use Signed URLs)...................................................................... 94
Trusted Signers ........................................................................................................... 94
AWS Account Numbers ................................................................................................ 94
Values that CloudFront Displays in the Console When You Create or Update an RTMP
Distribution ......................................................................................................................... 95
Distribution ID ............................................................................................................. 95
Status........................................................................................................................ 95
Last Modified .............................................................................................................. 95
Domain Name............................................................................................................. 95
Configuring the Media Player................................................................................................. 96
MPEG Files ................................................................................................................ 96
Using an Amazon S3 Bucket as the Origin for an RTMP Distribution............................................. 96
Creating Multiple RTMP Distributions for an Origin Server........................................................... 97
Restricting Access Using Crossdomain.xml.............................................................................. 97
Error Codes for RTMP Distributions........................................................................................ 98
Troubleshooting RTMP Distributions........................................................................................ 98
Working with Objects.................................................................................................................... 99
Format of URLs for CloudFront Objects................................................................................... 99
Format of Public URLs for Objects in Amazon S3............................................................ 100
Format of Public URLs for Objects in a Custom Origin...................................................... 101
How Public URLs Affect the Invalidation of Directories...................................................... 101
Format of Signed URLs............................................................................................... 101
API Version 2016-08-01
iv
Amazon CloudFront Developer Guide
How CloudFront Processes HTTP and HTTPS Requests.......................................................... 102
Increasing the Proportion of Requests that Are Served from CloudFront Edge Caches................... 102
Specifying How Long CloudFront Caches Your Objects..................................................... 102
Caching Based on Query String Parameters................................................................... 103
Caching Based on Cookie Values................................................................................. 103
Caching Based on Request Headers............................................................................. 104
Serving Media Content by Using HTTP.......................................................................... 104
Configuring CloudFront to Cache Based on Query String Parameters......................................... 105
Query String Parameters and Web Distributions.............................................................. 105
Query String Parameters and RTMP Distributions............................................................ 106
Configuring CloudFront to Cache Objects Based on Cookies..................................................... 106
Configuring CloudFront to Cache Objects Based on Request Headers........................................ 108
Headers and Web Distributions .................................................................................... 108
Headers and RTMP Distributions.................................................................................. 112
Forwarding Custom Headers to Your Origin (Web Distributions Only)........................................... 112
Configuring CloudFront to Forward Custom Headers to Your Origin..................................... 112
Custom Headers that CloudFront Can't Forward to Your Origin........................................... 113
Using Custom Headers for Cross-Origin Resource Sharing (CORS)................................... 113
Using Custom Headers to Restrict Access to Your Content on a Custom Origin..................... 113
Adding, Removing, or Replacing Objects in a Distribution.......................................................... 114
Adding Objects that You Want CloudFront to Distribute..................................................... 114
Updating Existing Objects Using Versioned Object Names................................................ 115
Updating Existing Objects Using the Same Object Names................................................. 115
Specifying How Long Objects Stay in a CloudFront Edge Cache (Expiration)........................ 116
Invalidating Objects (Web Distributions Only).................................................................. 121
Customizing Error Responses.............................................................................................. 127
Creating or Updating a Cache Behavior for Custom Error Pages........................................ 129
Changing Response Codes ......................................................................................... 129
Controlling How Long CloudFront Caches Errors............................................................. 129
How CloudFront Responds When a Custom Error Page Is Unavailable................................ 130
Pricing for Custom Error Pages .................................................................................... 130
Configuring Error Response Behavior............................................................................ 131
How CloudFront Processes Partial Requests for an Object (Range GETs)................................... 132
Specifying a Default Root Object (Web Distributions Only)........................................................ 132
Serving Compressed Files................................................................................................... 135
Using CloudFront to Compress Your Content................................................................... 135
Using a Custom Origin to Compress Your Content........................................................... 137
Request and Response Behavior.................................................................................................. 139
Request and Response Behavior for Amazon S3 Origins.......................................................... 139
How CloudFront Processes and Forwards Requests to Your Amazon S3 Origin Server........... 139
How CloudFront Processes Responses from Your Amazon S3 Origin Server........................ 144
Request and Response Behavior for Custom Origins............................................................... 145
How CloudFront Processes and Forwards Requests to Your Custom Origin Server................ 146
How CloudFront Processes Responses from Your Custom Origin Server............................. 155
How CloudFront Processes HTTP 3xx Status Codes from Your Origin......................................... 158
How CloudFront Processes and Caches HTTP 4xx and 5xx Status Codes from Your Origin............ 158
How CloudFront Processes Errors When You Have Configured Custom Error Pages.............. 158
How CloudFront Processes Errors When You Have Not Configured Custom Error Pages........ 160
HTTP 4xx and 5xx Status Codes that CloudFront Caches................................................. 161
Serving Private Content through CloudFront................................................................................... 162
Overview of Private Content................................................................................................. 162
Restricting Access to Objects in CloudFront Edge Caches................................................ 163
Restricting Access to Objects in Amazon S3 Buckets....................................................... 163
Using an HTTP Server for Private Content.............................................................................. 164
Task List: Serving Private Content......................................................................................... 165
Using an Origin Access Identity to Restrict Access to Your Amazon S3 Content............................ 166
Creating a CloudFront Origin Access Identity and Adding it to Your Distribution..................... 166
API Version 2016-08-01
v
Amazon CloudFront Developer Guide
Granting the Origin Access Identity Permission to Read Objects in Your Amazon S3
Bucket ..................................................................................................................... 168
Using an Origin Access Identity in Amazon S3 Regions that Support Only Signature Version
4 Authentication......................................................................................................... 170
Specifying the AWS Accounts That Can Create Signed URLs and Signed Cookies (Trusted
Signers) ........................................................................................................................... 171
Creating CloudFront Key Pairs for Your Trusted Signers..................................................... 172
Reformatting the CloudFront Private Key (.NET and Java Only).......................................... 173
Adding Trusted Signers to Your Distribution..................................................................... 174
Verifying that Trusted Signers Are Active (Optional).......................................................... 176
Rotating CloudFront Key Pairs...................................................................................... 176
Choosing Between Signed URLs and Signed Cookies.............................................................. 178
Using Both Signed URLs and Signed Cookies................................................................ 178
Using Signed URLs............................................................................................................ 179
Choosing Between Canned and Custom Policies for Signed URLs..................................... 179
How Signed URLs Work.............................................................................................. 180
Choosing How Long Signed URLs Are Valid................................................................... 180
When Does CloudFront Check the Expiration Date and Time in a Signed URL?.................... 181
Sample Code and Third-Party Tools .............................................................................. 181
Creating a Signed URL Using a Canned Policy............................................................... 182
Creating a Signed URL Using a Custom Policy................................................................ 189
Using Signed Cookies......................................................................................................... 198
Choosing Between Canned and Custom Policies for Signed Cookies.................................. 198
How Signed Cookies Work .......................................................................................... 198
Preventing Misuse of Signed Cookies............................................................................ 199
When Does CloudFront Check the Expiration Date and Time in a Signed Cookie?................. 200
Sample Code and Third-Party Tools .............................................................................. 200
Setting Signed Cookies Using a Canned Policy............................................................... 200
Setting Signed Cookies Using a Custom Policy............................................................... 205
Using a Linux Command and OpenSSL for Base64-Encoding and Encryption.............................. 213
Code Examples for Creating a Signature for a Signed URL....................................................... 214
Create a URL Signature Using Perl............................................................................... 214
Create a URL Signature Using PHP.............................................................................. 216
Create a URL Signature Using C# and the .NET Framework.............................................. 218
Create a URL Signature Using Java.............................................................................. 226
Using an HTTPS Connection to Access Your Objects....................................................................... 229
How CloudFront Works with HTTPS Connections.................................................................... 230
How to Require HTTPS for Communication between Viewers, CloudFront, and Your Origin............. 230
Supported Protocols and Ciphers ......................................................................................... 233
Using Alternate Domain Names and HTTPS........................................................................... 234
Choosing How CloudFront Serves HTTPS Requests........................................................ 234
Requirements and Limits on Using SSL/TLS Certificates with CloudFront............................ 236
To use alternate domain names with HTTPS................................................................... 238
Determining the Size of the Public Key in an SSL/TLS Certificate....................................... 239
Rotating SSL/TLS Certificates...................................................................................... 240
Reverting from a Custom SSL/TLS Certificate to the Default CloudFront Certificate............... 241
Switching from a Custom SSL/TLS Certificate with Dedicated IP Addresses to SNI............... 241
Charges for HTTPS Connections.......................................................................................... 242
Authentication and Access Control................................................................................................ 243
Authentication ................................................................................................................... 243
Access Control .................................................................................................................. 244
Overview of Managing Access ............................................................................................. 245
ARNs for CloudFront Resources................................................................................... 245
Understanding Resource Ownership ............................................................................. 245
Managing Access to Resources.................................................................................... 246
Specifying Policy Elements: Resources, Actions, Effects, and Principals.............................. 247
Specifying Conditions in a Policy................................................................................... 247
Using IAM Policies for CloudFront......................................................................................... 248
API Version 2016-08-01
vi
Amazon CloudFront Developer Guide
Permissions Required to Use the CloudFront Console...................................................... 248
AWS Managed (Predefined) Policies for CloudFront......................................................... 250
Customer Managed Policy Examples............................................................................. 250
CloudFront API Permissions Reference ................................................................................. 253
Required Permissions for Actions on Web Distributions..................................................... 253
Required Permissions for Actions on RTMP Distributions.................................................. 254
Required Permissions for Actions on Invalidations........................................................... 255
Required Permissions for Actions on Origin Access Identities............................................ 255
Required Permissions for Actions on Tags...................................................................... 255
Access Logs ............................................................................................................................. 256
How Logging Works ........................................................................................................... 256
Choosing an Amazon S3 Bucket for Your Access Logs............................................................. 257
Amazon S3 Permissions Required to Access Your Log Files...................................................... 258
File Name Format .............................................................................................................. 258
Timing of Log File Delivery.................................................................................................. 258
Analyzing Access Logs ....................................................................................................... 259
Editing Your Logging Settings............................................................................................... 259
Deleting Log Files from an Amazon S3 Bucket........................................................................ 260
Log File Format ................................................................................................................. 260
Web Distribution Log File Format.................................................................................. 261
RTMP Distribution Log File Format................................................................................ 267
Charges for Access Logs..................................................................................................... 269
Monitoring CloudFront Activity Using CloudWatch............................................................................ 270
Downloading Data in CSV Format......................................................................................... 271
Information About the Report....................................................................................... 272
Data in the CloudWatch Metrics Report......................................................................... 272
Capturing API Requests with CloudTrail......................................................................................... 274
CloudFront Information in CloudTrail Log Files......................................................................... 274
Understanding CloudFront Log File Entries............................................................................. 275
Tagging Amazon CloudFront Distributions ...................................................................................... 280
Tag Restrictions................................................................................................................. 281
Adding, Editing, and Deleting Tags for Distributions.................................................................. 281
Troubleshooting ......................................................................................................................... 282
I can't view the files in my web distribution.............................................................................. 282
Did you sign up for both CloudFront and Amazon S3?...................................................... 282
Are your Amazon S3 bucket and object permissions set correctly?..................................... 282
Is your alternate domain name (CNAME) correctly configured?.......................................... 283
Are you referencing the correct URL for your CloudFront distribution?................................. 283
Do you need help troubleshooting a custom origin?.......................................................... 283
I can't view the files in my RTMP distribution........................................................................... 284
Error Message: Certificate: <certificate-id> is being used by CloudFront....................................... 284
Load Testing CloudFront.............................................................................................................. 285
Streaming Tutorials..................................................................................................................... 286
Live Streaming .................................................................................................................. 286
On-Demand Streaming ....................................................................................................... 286
RTMP Streaming ............................................................................................................... 286
Live HTTP Streaming Using CloudFront and Adobe Media Server 5.0......................................... 286
Overview .................................................................................................................. 287
Steps to Configure Live Streaming................................................................................ 288
Creating an Amazon Web Services Account................................................................... 288
Creating an Amazon EC2 Key Pair................................................................................ 288
Subscribing to Adobe Media Server .............................................................................. 289
Creating an AWS CloudFormation Stack for Live Streaming.............................................. 290
Verifying that Adobe Media Server Is Running................................................................. 291
Setting Up Adobe Flash Media Live Encoder to Publish a Live Stream................................ 292
Embedding Strobe Media Playback for an Amazon CloudFront Live HTTP Stream in a Web
Application................................................................................................................ 295
Deleting an AWS CloudFormation Stack and an Amazon EBS Volume for Live Streaming....... 296
API Version 2016-08-01
vii
Amazon CloudFront Developer Guide
Frequently Asked Questions ........................................................................................ 297
Additional Documentation............................................................................................ 303
Live Smooth Streaming Using Amazon CloudFront and IIS Media Services 4.1............................. 304
Overview of Live Smooth Streaming with Amazon Web Services........................................ 304
Creating an Amazon Web Services Account................................................................... 305
Creating an Amazon EC2 Key Pair................................................................................ 305
Creating an AWS CloudFormation Stack for Live Smooth Streaming................................... 306
Verifying that Your Amazon EC2 Windows Server Instance Is Running................................. 309
Getting Your Windows Password................................................................................... 309
Encoding Your Live Stream.......................................................................................... 310
Viewing Your Live Smooth Stream................................................................................. 311
Deleting Your AWS CloudFormation Live Smooth Streaming Stack..................................... 311
Frequently Asked Questions ........................................................................................ 311
Additional Documentation............................................................................................ 313
Live Streaming with Wowza Streaming Engine 4.2................................................................... 314
Creating an Amazon Web Services Account................................................................... 314
Creating an Amazon EC2 Key Pair................................................................................ 315
Getting a License for Wowza Streaming Engine 4.2......................................................... 315
Subscribing to Wowza Streaming Engine 4.2 through AWS Marketplace.............................. 315
Creating an AWS CloudFormation Stack for Live Streaming.............................................. 316
Verifying that Wowza Streaming Engine 4.2 Is Running.................................................... 318
Setting Up an Encoder to Publish a Live Stream.............................................................. 318
Playing the Live Stream in a Web Application.................................................................. 319
Deleting an AWS CloudFormation Stack for Live Streaming............................................... 321
Frequently Asked Questions ........................................................................................ 321
Additional Documentation............................................................................................ 322
Live HTTP Streaming Using CloudFront and Any HTTP Origin................................................... 324
Creating a New CloudFront Distribution for Live Streaming................................................ 324
Configuring Web Players to Play the Live Stream............................................................. 325
(Optional) Deleting an AWS CloudFormation Stack for Live Streaming................................ 325
On-Demand Media Streaming with Unified Streaming.............................................................. 325
Creating an Amazon Web Services Account................................................................... 326
Creating an Amazon EC2 Key Pair................................................................................ 327
Subscribing to Unified Streaming.................................................................................. 327
Creating an AWS CloudFormation Stack for On-Demand Streaming................................... 328
Verifying that Unified Streaming Server Is Running.......................................................... 330
Uploading Your Media Files to Amazon S3 ..................................................................... 330
Playing the On-Demand Stream In a Test Web Application................................................ 331
Deleting the AWS CloudFormation Stack and Amazon S3 Bucket for On-Demand
Streaming................................................................................................................. 333
Frequently Asked Questions ........................................................................................ 334
Additional Documentation............................................................................................ 336
On-Demand Video Streaming Using CloudFront and Adobe Flash Player..................................... 338
Creating an Amazon S3 Bucket.................................................................................... 338
Creating CloudFront Web and RTMP Distributions........................................................... 338
Creating a Flash Project Using Adobe Flash Builder......................................................... 340
Uploading Media and Flash Builder Files to an Amazon S3 Bucket..................................... 341
Playing the Media File................................................................................................. 342
On-Demand Video Streaming Using CloudFront and Flowplayer for Adobe Flash.......................... 343
Uploading Media and Flowplayer Files to an Amazon S3 Bucket........................................ 343
Creating CloudFront Web and RTMP Distributions........................................................... 344
Embedding Video in an HTML Page.............................................................................. 345
On-Demand Video Streaming Using CloudFront and JW Player................................................. 348
Uploading Media and JW Player Files to an Amazon S3 Bucket......................................... 348
Creating CloudFront Web and RTMP Distributions........................................................... 349
Embedding Video in a Web Page.................................................................................. 350
Uploading the HTML File and Playing the Video.............................................................. 352
Limits....................................................................................................................................... 353
API Version 2016-08-01
viii
Amazon CloudFront Developer Guide
Resources ................................................................................................................................ 355
Additional Amazon CloudFront Documentation........................................................................ 355
Getting Support ................................................................................................................. 356
CloudFront Developer Tools and SDKs................................................................................... 356
Using CloudFront Logging ................................................................................................... 356
Additional Tips from the Amazon Web Services Blog................................................................ 356
Invalidating Objects ............................................................................................................ 357
Distributing Streaming Media ............................................................................................... 357
Tools and Code Examples for Configuring Private Content........................................................ 357
Using CloudFront with a Content Management System............................................................. 358
Document History ...................................................................................................................... 359
AWS Glossary........................................................................................................................... 373
API Version 2016-08-01
ix
Amazon CloudFront Developer Guide
What Is Amazon CloudFront?
Topics
• How CloudFront Delivers Content (p.4)
• Locations and IP Address Ranges of CloudFront Edge Servers (p.6)
• PCI DSS Compliance (p.6)
CloudFront is a web service that speeds up distribution of your static and dynamic web content, for
example, .html, .css, .php, and image files, to end users. CloudFront delivers your content through a
worldwide network of data centers called edge locations.When a user requests content that you're serving
with CloudFront, the user is routed to the edge location that provides the lowest latency (time delay), so
content is delivered with the best possible performance. If the content is already in the edge location with
the lowest latency, CloudFront delivers it immediately. If the content is not currently in that edge location,
CloudFront retrieves it from an Amazon S3 bucket or an HTTP server (for example, a web server) that
you have identified as the source for the definitive version of your content.
This concept is best illustrated by an example. Suppose you're serving the following image from a traditional
web server, not from CloudFront:
API Version 2016-08-01
1