|
A distribution is a link between an
Amazon S3 bucket
(the origin server) and a domain name (assign by
Amazon CloudFront
). You use this new domain name in place of standard Amazon S3 references.Public Distribution has "All User" read permission, but if you want to restrict who can access your objects, then you can do it through creating
Private Distribution
.
Using Bucket Explorer, you can also create distribution with Https support which delivers the content over an HTTPS connection.
Create Private Distribution:
Once you've stored your objects in your origin server (Amazon S3 Bucket), inorder to make Amazon CloudFront recognize your objects and restrict who can access your objects, you need to create a private distribution, which is a link between an Amazon S3 bucket (the origin server) and a domain name (which Amazon CloudFront automatically assigns). To create a private distribution you need to set some additional configuration in which you specify
OriginAccessIdentityID
and AWS
Trusted Signers
with other distributon configuration i.e. Bucket name, CNAME(s), Comment and Enable/Disable. In configuration CNAME(s) and Comment are optional. After that You set the ACL on your objects so that only you and CloudFront have read permission for the objects. This means that end user access to the objects can only be through CloudFront. You also produce special signed URLs for the particular end users you want to give access to.
-
ˆ
Origin Access IdentityID
An authenticated virtual identity to fetch private objects from your origin server.
-
ˆ
Trusted Signers
:
It is a list of AWS user's Account Numbers (other than yours) that you want to give signing authority.
Follow the given steps to Create Private Distribution:
|
|
-
Run Bucket Explorer.
-
Choose "Distribution" icon from Bucket table toolbar or you can do the same by selecting "Manage Distribution" option from right click menu option of any bucket.
-
It displays a "List distribution" window having list of already created distributions.
-
To create new distribution choose "New" icon from toolbar of List distribution window.
-
It opens new window to create distribution, now you need to set configuration for private distribution.
To set configuration you need to give following information:
-
Select bucket name from drop down list.
-
Select distribution type "PRIVATE".
-
To create disabled distribution, deselect check box "Enable Distribution", by default it is enabled.
-
If you want to give comments for distribution then write comment in comment text field.
-
If you want to create distribution with HTTPS support, then select the check box "
Required HTTPS Protocol
".
-
Add CNAME(s) to list box by clicking "+" button and you can remove CNAME(s) by clicking "-" button. You can give maximum up to 10 CNAME(s).
-
If you want to set default root object, then enter the object name in text box for "
Default Root Object
".
-
Click on Advance Button exist at left-bottom corner.
-
It will open Advance panel.
-
Here you have to set Origin Access Identity and Trusted Signer [Optional] (other than your account number)
-
Set Origin Access Identity from existing or create new.
-
Add AWSAccountNumber in TrustedSigners list.
-
Click OK.
-
After setting the entire values for private distribution click on "Create" button, It will create private distribution for your specified bucket.
|
1 ˆ
Default Root Object
:
You can use bucket explorer to assign a default object for your distribution. A default object is a file that is designated as the object for Amazon CloudFront to return in response when a user requests to your distribution's root URL instead of a specific object in your distribution.
Related Topics
:
|
|