yangs.dev

Useful Tips (3) - Using CloudFront in a Closed Network

Useful Tips (3) - Using CloudFront in a Closed Network
yangs.dev·

Getting Started

We're using CloudFront internally at the company. Previously, it was a CF that didn't require Invalidation requests, but due to internal circumstances, we now need to make Invalidation requests.

As you may know from my previous posts, I'm developing services in a closed network environment.

So, in keeping with the purpose of this category, I'd like to leave a list of the necessary domains.

Firewall Rules to Open

Domain Port

cloudfront.amazonaws.com 443

Actually, You Just Need to Remember This:

  1. For region-specific services (S3, DynamoDB, SQS, etc.)
service-name.region.amazonaws.com
  1. For global services that don't require a region (CloudFront)

service-name.amazonaws.com

service-name.amazonaws.com