DocsAWS 101BlogServices

CloudFront

Distributions, origin access controls, cache / response-headers / origin-request policies, CloudFront Functions, KeyValueStore, invalidations, and SaaS Manager multi-tenant distributions (connection groups + distribution tenants).

REST-XML multi-tenant 101 operations

Quick start

import boto3
cf = boto3.client("cloudfront", endpoint_url="http://localhost:4566",
                  region_name="us-east-1",
                  aws_access_key_id="test", aws_secret_access_key="test")
cf.list_distributions()

Supported operations

101 operations exposed by this service as of MiniStack 1.5.31. Extracted directly from the handler dispatch in the source module.

AssociateDistributionTenantWebACL AssociateDistributionWebACL CreateCachePolicy CreateConnectionGroup CreateDistribution CreateDistributionTenant CreateFunction CreateInvalidation CreateInvalidationForDistributionTenant CreateKeyGroup CreateKeyValueStore CreateMonitoringSubscription CreateOriginAccessControl CreateOriginRequestPolicy CreatePublicKey CreateResponseHeadersPolicy CreateVpcOrigin DeleteCachePolicy DeleteConnectionGroup DeleteDistribution DeleteDistributionTenant DeleteFunction DeleteKey DeleteKeyGroup DeleteKeyValueStore DeleteMonitoringSubscription DeleteOriginAccessControl DeleteOriginRequestPolicy DeletePublicKey DeleteResponseHeadersPolicy DeleteVpcOrigin DescribeFunction DescribeKeyValueStore DisassociateDistributionTenantWebACL DisassociateDistributionWebACL GetCachePolicy GetCachePolicyConfig GetConnectionGroup GetConnectionGroupByRoutingEndpoint GetDistribution GetDistributionConfig GetDistributionTenant GetDistributionTenantByDomain GetFunction GetInvalidation GetInvalidationForDistributionTenant GetKey GetKeyGroup GetKeyGroupConfig GetManagedCertificateDetails GetMonitoringSubscription GetOriginAccessControl GetOriginAccessControlConfig GetOriginRequestPolicy GetOriginRequestPolicyConfig GetPublicKey GetPublicKeyConfig GetResponseHeadersPolicy GetResponseHeadersPolicyConfig GetVpcOrigin ListCachePolicies ListConnectionGroups ListDistributions ListDistributionsByCachePolicyId ListDistributionsByConnectionMode ListDistributionsByOriginRequestPolicyId ListDistributionsByResponseHeadersPolicyId ListDistributionTenants ListDistributionTenantsByCustomization ListDomainConflicts ListFunctions ListInvalidations ListInvalidationsForDistributionTenant ListKeyGroups ListKeys ListKeyValueStores ListOriginAccessControls ListOriginRequestPolicies ListPublicKeys ListResponseHeadersPolicies ListTagsForResource ListVpcOrigins PublishFunction PutKey TagResource UntagResource UpdateCachePolicy UpdateConnectionGroup UpdateDistribution UpdateDistributionTenant UpdateDomainAssociation UpdateFunction UpdateKeyGroup UpdateKeys UpdateKeyValueStore UpdateOriginAccessControl UpdateOriginRequestPolicy UpdatePublicKey UpdateResponseHeadersPolicy UpdateVpcOrigin VerifyDnsConfiguration

CloudFormation

The CloudFormation engine provisions these resource types via this service:

AWS::CloudFront::CloudFrontOriginAccessIdentity AWS::CloudFront::Distribution AWS::CloudFront::KeyValueStore

See CloudFormation engine for intrinsic support and lifecycle details.

Known limitations

  • No actual edge caching or content delivery occurs — distributions are metadata.
  • OAC (Origin Access Control) request signing is not implemented.

Source

  • ministack/services/cloudfront.py

Read the source to verify the ops list above — dispatch tables and handler functions are the ground truth.