aws / aws/aws-cdk

aws_cloudfront: No way to set response headers for CloudFrontWebDistribution

Open
#25,531 3 comments 0 reactions 0 assignees View on GitHub
@aws-cdk/aws-cloudfront effort/medium feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the feature

As a developer,
I want to be able to set CSP headers with the `CloudFrontWebDistribution` construct
So that I don't have to create a special lambda to set them manually.

### Use Case

Cloudfront has the option to set CSP headers for every response, but this is not exposed by the construct.

### Proposed Solution

_No response_

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

v1 and v2

### Environment details (OS name and version, etc.)

any

Contributor guide

Open the contributing guide

Research direction

Locate the CloudFrontWebDistribution construct and inspect how it currently configures CloudFront responses. Check the AWS CDK APIs for response security headers, especially CSP; done means the construct can configure CSP headers without requiring a special Lambda.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.