Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS
  3. API Docs
  4. cloudfront
  5. ResponseHeadersPolicy
AWS v6.74.0 published on Wednesday, Mar 26, 2025 by Pulumi
pulumi/pulumi-aws

aws.cloudfront.ResponseHeadersPolicy

Explore with Pulumi AI

AWS v6.74.0 published on Wednesday, Mar 26, 2025 by Pulumi
pulumi/pulumi-aws

Provides a CloudFront response headers policy resource. A response headers policy contains information about a set of HTTP response headers and their values. After you create a response headers policy, you can use its ID to attach it to one or more cache behaviors in a CloudFront distribution. When it’s attached to a cache behavior, CloudFront adds the headers in the policy to every response that it sends for requests that match the cache behavior.

Example Usage

The example below creates a CloudFront response headers policy.

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.cloudfront.ResponseHeadersPolicy("example", {
    name: "example-policy",
    comment: "test comment",
    corsConfig: {
        accessControlAllowCredentials: true,
        accessControlAllowHeaders: {
            items: ["test"],
        },
        accessControlAllowMethods: {
            items: ["GET"],
        },
        accessControlAllowOrigins: {
            items: ["test.example.comtest"],
        },
        originOverride: true,
    },
});
Copy
import pulumi
import pulumi_aws as aws

example = aws.cloudfront.ResponseHeadersPolicy("example",
    name="example-policy",
    comment="test comment",
    cors_config={
        "access_control_allow_credentials": True,
        "access_control_allow_headers": {
            "items": ["test"],
        },
        "access_control_allow_methods": {
            "items": ["GET"],
        },
        "access_control_allow_origins": {
            "items": ["test.example.comtest"],
        },
        "origin_override": True,
    })
Copy
package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cloudfront"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudfront.NewResponseHeadersPolicy(ctx, "example", &cloudfront.ResponseHeadersPolicyArgs{
			Name:    pulumi.String("example-policy"),
			Comment: pulumi.String("test comment"),
			CorsConfig: &cloudfront.ResponseHeadersPolicyCorsConfigArgs{
				AccessControlAllowCredentials: pulumi.Bool(true),
				AccessControlAllowHeaders: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs{
					Items: pulumi.StringArray{
						pulumi.String("test"),
					},
				},
				AccessControlAllowMethods: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs{
					Items: pulumi.StringArray{
						pulumi.String("GET"),
					},
				},
				AccessControlAllowOrigins: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs{
					Items: pulumi.StringArray{
						pulumi.String("test.example.comtest"),
					},
				},
				OriginOverride: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.CloudFront.ResponseHeadersPolicy("example", new()
    {
        Name = "example-policy",
        Comment = "test comment",
        CorsConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigArgs
        {
            AccessControlAllowCredentials = true,
            AccessControlAllowHeaders = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs
            {
                Items = new[]
                {
                    "test",
                },
            },
            AccessControlAllowMethods = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs
            {
                Items = new[]
                {
                    "GET",
                },
            },
            AccessControlAllowOrigins = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs
            {
                Items = new[]
                {
                    "test.example.comtest",
                },
            },
            OriginOverride = true,
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cloudfront.ResponseHeadersPolicy;
import com.pulumi.aws.cloudfront.ResponseHeadersPolicyArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyCorsConfigArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResponseHeadersPolicy("example", ResponseHeadersPolicyArgs.builder()
            .name("example-policy")
            .comment("test comment")
            .corsConfig(ResponseHeadersPolicyCorsConfigArgs.builder()
                .accessControlAllowCredentials(true)
                .accessControlAllowHeaders(ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs.builder()
                    .items("test")
                    .build())
                .accessControlAllowMethods(ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs.builder()
                    .items("GET")
                    .build())
                .accessControlAllowOrigins(ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs.builder()
                    .items("test.example.comtest")
                    .build())
                .originOverride(true)
                .build())
            .build());

    }
}
Copy
resources:
  example:
    type: aws:cloudfront:ResponseHeadersPolicy
    properties:
      name: example-policy
      comment: test comment
      corsConfig:
        accessControlAllowCredentials: true
        accessControlAllowHeaders:
          items:
            - test
        accessControlAllowMethods:
          items:
            - GET
        accessControlAllowOrigins:
          items:
            - test.example.comtest
        originOverride: true
Copy

The example below creates a CloudFront response headers policy with a custom headers config.

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.cloudfront.ResponseHeadersPolicy("example", {
    name: "example-headers-policy",
    customHeadersConfig: {
        items: [
            {
                header: "X-Permitted-Cross-Domain-Policies",
                override: true,
                value: "none",
            },
            {
                header: "X-Test",
                override: true,
                value: "none",
            },
        ],
    },
});
Copy
import pulumi
import pulumi_aws as aws

example = aws.cloudfront.ResponseHeadersPolicy("example",
    name="example-headers-policy",
    custom_headers_config={
        "items": [
            {
                "header": "X-Permitted-Cross-Domain-Policies",
                "override": True,
                "value": "none",
            },
            {
                "header": "X-Test",
                "override": True,
                "value": "none",
            },
        ],
    })
Copy
package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cloudfront"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudfront.NewResponseHeadersPolicy(ctx, "example", &cloudfront.ResponseHeadersPolicyArgs{
			Name: pulumi.String("example-headers-policy"),
			CustomHeadersConfig: &cloudfront.ResponseHeadersPolicyCustomHeadersConfigArgs{
				Items: cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArray{
					&cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArgs{
						Header:   pulumi.String("X-Permitted-Cross-Domain-Policies"),
						Override: pulumi.Bool(true),
						Value:    pulumi.String("none"),
					},
					&cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArgs{
						Header:   pulumi.String("X-Test"),
						Override: pulumi.Bool(true),
						Value:    pulumi.String("none"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.CloudFront.ResponseHeadersPolicy("example", new()
    {
        Name = "example-headers-policy",
        CustomHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigArgs
        {
            Items = new[]
            {
                new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigItemArgs
                {
                    Header = "X-Permitted-Cross-Domain-Policies",
                    Override = true,
                    Value = "none",
                },
                new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigItemArgs
                {
                    Header = "X-Test",
                    Override = true,
                    Value = "none",
                },
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cloudfront.ResponseHeadersPolicy;
import com.pulumi.aws.cloudfront.ResponseHeadersPolicyArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyCustomHeadersConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResponseHeadersPolicy("example", ResponseHeadersPolicyArgs.builder()
            .name("example-headers-policy")
            .customHeadersConfig(ResponseHeadersPolicyCustomHeadersConfigArgs.builder()
                .items(                
                    ResponseHeadersPolicyCustomHeadersConfigItemArgs.builder()
                        .header("X-Permitted-Cross-Domain-Policies")
                        .override(true)
                        .value("none")
                        .build(),
                    ResponseHeadersPolicyCustomHeadersConfigItemArgs.builder()
                        .header("X-Test")
                        .override(true)
                        .value("none")
                        .build())
                .build())
            .build());

    }
}
Copy
resources:
  example:
    type: aws:cloudfront:ResponseHeadersPolicy
    properties:
      name: example-headers-policy
      customHeadersConfig:
        items:
          - header: X-Permitted-Cross-Domain-Policies
            override: true
            value: none
          - header: X-Test
            override: true
            value: none
Copy

The example below creates a CloudFront response headers policy with a custom headers config, remove headers config and server timing headers config.

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.cloudfront.ResponseHeadersPolicy("example", {
    name: "example-headers-policy",
    customHeadersConfig: {
        items: [{
            header: "X-Permitted-Cross-Domain-Policies",
            override: true,
            value: "none",
        }],
    },
    removeHeadersConfig: {
        items: [{
            header: "Set-Cookie",
        }],
    },
    serverTimingHeadersConfig: {
        enabled: true,
        samplingRate: 50,
    },
});
Copy
import pulumi
import pulumi_aws as aws

example = aws.cloudfront.ResponseHeadersPolicy("example",
    name="example-headers-policy",
    custom_headers_config={
        "items": [{
            "header": "X-Permitted-Cross-Domain-Policies",
            "override": True,
            "value": "none",
        }],
    },
    remove_headers_config={
        "items": [{
            "header": "Set-Cookie",
        }],
    },
    server_timing_headers_config={
        "enabled": True,
        "sampling_rate": 50,
    })
Copy
package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cloudfront"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudfront.NewResponseHeadersPolicy(ctx, "example", &cloudfront.ResponseHeadersPolicyArgs{
			Name: pulumi.String("example-headers-policy"),
			CustomHeadersConfig: &cloudfront.ResponseHeadersPolicyCustomHeadersConfigArgs{
				Items: cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArray{
					&cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArgs{
						Header:   pulumi.String("X-Permitted-Cross-Domain-Policies"),
						Override: pulumi.Bool(true),
						Value:    pulumi.String("none"),
					},
				},
			},
			RemoveHeadersConfig: &cloudfront.ResponseHeadersPolicyRemoveHeadersConfigArgs{
				Items: cloudfront.ResponseHeadersPolicyRemoveHeadersConfigItemArray{
					&cloudfront.ResponseHeadersPolicyRemoveHeadersConfigItemArgs{
						Header: pulumi.String("Set-Cookie"),
					},
				},
			},
			ServerTimingHeadersConfig: &cloudfront.ResponseHeadersPolicyServerTimingHeadersConfigArgs{
				Enabled:      pulumi.Bool(true),
				SamplingRate: pulumi.Float64(50),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.CloudFront.ResponseHeadersPolicy("example", new()
    {
        Name = "example-headers-policy",
        CustomHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigArgs
        {
            Items = new[]
            {
                new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigItemArgs
                {
                    Header = "X-Permitted-Cross-Domain-Policies",
                    Override = true,
                    Value = "none",
                },
            },
        },
        RemoveHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyRemoveHeadersConfigArgs
        {
            Items = new[]
            {
                new Aws.CloudFront.Inputs.ResponseHeadersPolicyRemoveHeadersConfigItemArgs
                {
                    Header = "Set-Cookie",
                },
            },
        },
        ServerTimingHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyServerTimingHeadersConfigArgs
        {
            Enabled = true,
            SamplingRate = 50,
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cloudfront.ResponseHeadersPolicy;
import com.pulumi.aws.cloudfront.ResponseHeadersPolicyArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyCustomHeadersConfigArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyRemoveHeadersConfigArgs;
import com.pulumi.aws.cloudfront.inputs.ResponseHeadersPolicyServerTimingHeadersConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResponseHeadersPolicy("example", ResponseHeadersPolicyArgs.builder()
            .name("example-headers-policy")
            .customHeadersConfig(ResponseHeadersPolicyCustomHeadersConfigArgs.builder()
                .items(ResponseHeadersPolicyCustomHeadersConfigItemArgs.builder()
                    .header("X-Permitted-Cross-Domain-Policies")
                    .override(true)
                    .value("none")
                    .build())
                .build())
            .removeHeadersConfig(ResponseHeadersPolicyRemoveHeadersConfigArgs.builder()
                .items(ResponseHeadersPolicyRemoveHeadersConfigItemArgs.builder()
                    .header("Set-Cookie")
                    .build())
                .build())
            .serverTimingHeadersConfig(ResponseHeadersPolicyServerTimingHeadersConfigArgs.builder()
                .enabled(true)
                .samplingRate(50)
                .build())
            .build());

    }
}
Copy
resources:
  example:
    type: aws:cloudfront:ResponseHeadersPolicy
    properties:
      name: example-headers-policy
      customHeadersConfig:
        items:
          - header: X-Permitted-Cross-Domain-Policies
            override: true
            value: none
      removeHeadersConfig:
        items:
          - header: Set-Cookie
      serverTimingHeadersConfig:
        enabled: true
        samplingRate: 50
Copy

Create ResponseHeadersPolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ResponseHeadersPolicy(name: string, args?: ResponseHeadersPolicyArgs, opts?: CustomResourceOptions);
@overload
def ResponseHeadersPolicy(resource_name: str,
                          args: Optional[ResponseHeadersPolicyArgs] = None,
                          opts: Optional[ResourceOptions] = None)

@overload
def ResponseHeadersPolicy(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          comment: Optional[str] = None,
                          cors_config: Optional[ResponseHeadersPolicyCorsConfigArgs] = None,
                          custom_headers_config: Optional[ResponseHeadersPolicyCustomHeadersConfigArgs] = None,
                          etag: Optional[str] = None,
                          name: Optional[str] = None,
                          remove_headers_config: Optional[ResponseHeadersPolicyRemoveHeadersConfigArgs] = None,
                          security_headers_config: Optional[ResponseHeadersPolicySecurityHeadersConfigArgs] = None,
                          server_timing_headers_config: Optional[ResponseHeadersPolicyServerTimingHeadersConfigArgs] = None)
func NewResponseHeadersPolicy(ctx *Context, name string, args *ResponseHeadersPolicyArgs, opts ...ResourceOption) (*ResponseHeadersPolicy, error)
public ResponseHeadersPolicy(string name, ResponseHeadersPolicyArgs? args = null, CustomResourceOptions? opts = null)
public ResponseHeadersPolicy(String name, ResponseHeadersPolicyArgs args)
public ResponseHeadersPolicy(String name, ResponseHeadersPolicyArgs args, CustomResourceOptions options)

type: aws:cloudfront:ResponseHeadersPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args ResponseHeadersPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args ResponseHeadersPolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args ResponseHeadersPolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args ResponseHeadersPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ResponseHeadersPolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var responseHeadersPolicyResource = new Aws.CloudFront.ResponseHeadersPolicy("responseHeadersPolicyResource", new()
{
    Comment = "string",
    CorsConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigArgs
    {
        AccessControlAllowCredentials = false,
        AccessControlAllowHeaders = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs
        {
            Items = new[]
            {
                "string",
            },
        },
        AccessControlAllowMethods = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs
        {
            Items = new[]
            {
                "string",
            },
        },
        AccessControlAllowOrigins = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs
        {
            Items = new[]
            {
                "string",
            },
        },
        OriginOverride = false,
        AccessControlExposeHeaders = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCorsConfigAccessControlExposeHeadersArgs
        {
            Items = new[]
            {
                "string",
            },
        },
        AccessControlMaxAgeSec = 0,
    },
    CustomHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigArgs
    {
        Items = new[]
        {
            new Aws.CloudFront.Inputs.ResponseHeadersPolicyCustomHeadersConfigItemArgs
            {
                Header = "string",
                Override = false,
                Value = "string",
            },
        },
    },
    Etag = "string",
    Name = "string",
    RemoveHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyRemoveHeadersConfigArgs
    {
        Items = new[]
        {
            new Aws.CloudFront.Inputs.ResponseHeadersPolicyRemoveHeadersConfigItemArgs
            {
                Header = "string",
            },
        },
    },
    SecurityHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigArgs
    {
        ContentSecurityPolicy = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicyArgs
        {
            ContentSecurityPolicy = "string",
            Override = false,
        },
        ContentTypeOptions = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigContentTypeOptionsArgs
        {
            Override = false,
        },
        FrameOptions = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigFrameOptionsArgs
        {
            FrameOption = "string",
            Override = false,
        },
        ReferrerPolicy = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigReferrerPolicyArgs
        {
            Override = false,
            ReferrerPolicy = "string",
        },
        StrictTransportSecurity = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurityArgs
        {
            AccessControlMaxAgeSec = 0,
            Override = false,
            IncludeSubdomains = false,
            Preload = false,
        },
        XssProtection = new Aws.CloudFront.Inputs.ResponseHeadersPolicySecurityHeadersConfigXssProtectionArgs
        {
            Override = false,
            Protection = false,
            ModeBlock = false,
            ReportUri = "string",
        },
    },
    ServerTimingHeadersConfig = new Aws.CloudFront.Inputs.ResponseHeadersPolicyServerTimingHeadersConfigArgs
    {
        Enabled = false,
        SamplingRate = 0,
    },
});
Copy
example, err := cloudfront.NewResponseHeadersPolicy(ctx, "responseHeadersPolicyResource", &cloudfront.ResponseHeadersPolicyArgs{
	Comment: pulumi.String("string"),
	CorsConfig: &cloudfront.ResponseHeadersPolicyCorsConfigArgs{
		AccessControlAllowCredentials: pulumi.Bool(false),
		AccessControlAllowHeaders: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs{
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		AccessControlAllowMethods: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs{
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		AccessControlAllowOrigins: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs{
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		OriginOverride: pulumi.Bool(false),
		AccessControlExposeHeaders: &cloudfront.ResponseHeadersPolicyCorsConfigAccessControlExposeHeadersArgs{
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		AccessControlMaxAgeSec: pulumi.Int(0),
	},
	CustomHeadersConfig: &cloudfront.ResponseHeadersPolicyCustomHeadersConfigArgs{
		Items: cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArray{
			&cloudfront.ResponseHeadersPolicyCustomHeadersConfigItemArgs{
				Header:   pulumi.String("string"),
				Override: pulumi.Bool(false),
				Value:    pulumi.String("string"),
			},
		},
	},
	Etag: pulumi.String("string"),
	Name: pulumi.String("string"),
	RemoveHeadersConfig: &cloudfront.ResponseHeadersPolicyRemoveHeadersConfigArgs{
		Items: cloudfront.ResponseHeadersPolicyRemoveHeadersConfigItemArray{
			&cloudfront.ResponseHeadersPolicyRemoveHeadersConfigItemArgs{
				Header: pulumi.String("string"),
			},
		},
	},
	SecurityHeadersConfig: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigArgs{
		ContentSecurityPolicy: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicyArgs{
			ContentSecurityPolicy: pulumi.String("string"),
			Override:              pulumi.Bool(false),
		},
		ContentTypeOptions: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigContentTypeOptionsArgs{
			Override: pulumi.Bool(false),
		},
		FrameOptions: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigFrameOptionsArgs{
			FrameOption: pulumi.String("string"),
			Override:    pulumi.Bool(false),
		},
		ReferrerPolicy: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigReferrerPolicyArgs{
			Override:       pulumi.Bool(false),
			ReferrerPolicy: pulumi.String("string"),
		},
		StrictTransportSecurity: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurityArgs{
			AccessControlMaxAgeSec: pulumi.Int(0),
			Override:               pulumi.Bool(false),
			IncludeSubdomains:      pulumi.Bool(false),
			Preload:                pulumi.Bool(false),
		},
		XssProtection: &cloudfront.ResponseHeadersPolicySecurityHeadersConfigXssProtectionArgs{
			Override:   pulumi.Bool(false),
			Protection: pulumi.Bool(false),
			ModeBlock:  pulumi.Bool(false),
			ReportUri:  pulumi.String("string"),
		},
	},
	ServerTimingHeadersConfig: &cloudfront.ResponseHeadersPolicyServerTimingHeadersConfigArgs{
		Enabled:      pulumi.Bool(false),
		SamplingRate: pulumi.Float64(0),
	},
})
Copy
var responseHeadersPolicyResource = new ResponseHeadersPolicy("responseHeadersPolicyResource", ResponseHeadersPolicyArgs.builder()
    .comment("string")
    .corsConfig(ResponseHeadersPolicyCorsConfigArgs.builder()
        .accessControlAllowCredentials(false)
        .accessControlAllowHeaders(ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs.builder()
            .items("string")
            .build())
        .accessControlAllowMethods(ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs.builder()
            .items("string")
            .build())
        .accessControlAllowOrigins(ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs.builder()
            .items("string")
            .build())
        .originOverride(false)
        .accessControlExposeHeaders(ResponseHeadersPolicyCorsConfigAccessControlExposeHeadersArgs.builder()
            .items("string")
            .build())
        .accessControlMaxAgeSec(0)
        .build())
    .customHeadersConfig(ResponseHeadersPolicyCustomHeadersConfigArgs.builder()
        .items(ResponseHeadersPolicyCustomHeadersConfigItemArgs.builder()
            .header("string")
            .override(false)
            .value("string")
            .build())
        .build())
    .etag("string")
    .name("string")
    .removeHeadersConfig(ResponseHeadersPolicyRemoveHeadersConfigArgs.builder()
        .items(ResponseHeadersPolicyRemoveHeadersConfigItemArgs.builder()
            .header("string")
            .build())
        .build())
    .securityHeadersConfig(ResponseHeadersPolicySecurityHeadersConfigArgs.builder()
        .contentSecurityPolicy(ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicyArgs.builder()
            .contentSecurityPolicy("string")
            .override(false)
            .build())
        .contentTypeOptions(ResponseHeadersPolicySecurityHeadersConfigContentTypeOptionsArgs.builder()
            .override(false)
            .build())
        .frameOptions(ResponseHeadersPolicySecurityHeadersConfigFrameOptionsArgs.builder()
            .frameOption("string")
            .override(false)
            .build())
        .referrerPolicy(ResponseHeadersPolicySecurityHeadersConfigReferrerPolicyArgs.builder()
            .override(false)
            .referrerPolicy("string")
            .build())
        .strictTransportSecurity(ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurityArgs.builder()
            .accessControlMaxAgeSec(0)
            .override(false)
            .includeSubdomains(false)
            .preload(false)
            .build())
        .xssProtection(ResponseHeadersPolicySecurityHeadersConfigXssProtectionArgs.builder()
            .override(false)
            .protection(false)
            .modeBlock(false)
            .reportUri("string")
            .build())
        .build())
    .serverTimingHeadersConfig(ResponseHeadersPolicyServerTimingHeadersConfigArgs.builder()
        .enabled(false)
        .samplingRate(0)
        .build())
    .build());
Copy
response_headers_policy_resource = aws.cloudfront.ResponseHeadersPolicy("responseHeadersPolicyResource",
    comment="string",
    cors_config={
        "access_control_allow_credentials": False,
        "access_control_allow_headers": {
            "items": ["string"],
        },
        "access_control_allow_methods": {
            "items": ["string"],
        },
        "access_control_allow_origins": {
            "items": ["string"],
        },
        "origin_override": False,
        "access_control_expose_headers": {
            "items": ["string"],
        },
        "access_control_max_age_sec": 0,
    },
    custom_headers_config={
        "items": [{
            "header": "string",
            "override": False,
            "value": "string",
        }],
    },
    etag="string",
    name="string",
    remove_headers_config={
        "items": [{
            "header": "string",
        }],
    },
    security_headers_config={
        "content_security_policy": {
            "content_security_policy": "string",
            "override": False,
        },
        "content_type_options": {
            "override": False,
        },
        "frame_options": {
            "frame_option": "string",
            "override": False,
        },
        "referrer_policy": {
            "override": False,
            "referrer_policy": "string",
        },
        "strict_transport_security": {
            "access_control_max_age_sec": 0,
            "override": False,
            "include_subdomains": False,
            "preload": False,
        },
        "xss_protection": {
            "override": False,
            "protection": False,
            "mode_block": False,
            "report_uri": "string",
        },
    },
    server_timing_headers_config={
        "enabled": False,
        "sampling_rate": 0,
    })
Copy
const responseHeadersPolicyResource = new aws.cloudfront.ResponseHeadersPolicy("responseHeadersPolicyResource", {
    comment: "string",
    corsConfig: {
        accessControlAllowCredentials: false,
        accessControlAllowHeaders: {
            items: ["string"],
        },
        accessControlAllowMethods: {
            items: ["string"],
        },
        accessControlAllowOrigins: {
            items: ["string"],
        },
        originOverride: false,
        accessControlExposeHeaders: {
            items: ["string"],
        },
        accessControlMaxAgeSec: 0,
    },
    customHeadersConfig: {
        items: [{
            header: "string",
            override: false,
            value: "string",
        }],
    },
    etag: "string",
    name: "string",
    removeHeadersConfig: {
        items: [{
            header: "string",
        }],
    },
    securityHeadersConfig: {
        contentSecurityPolicy: {
            contentSecurityPolicy: "string",
            override: false,
        },
        contentTypeOptions: {
            override: false,
        },
        frameOptions: {
            frameOption: "string",
            override: false,
        },
        referrerPolicy: {
            override: false,
            referrerPolicy: "string",
        },
        strictTransportSecurity: {
            accessControlMaxAgeSec: 0,
            override: false,
            includeSubdomains: false,
            preload: false,
        },
        xssProtection: {
            override: false,
            protection: false,
            modeBlock: false,
            reportUri: "string",
        },
    },
    serverTimingHeadersConfig: {
        enabled: false,
        samplingRate: 0,
    },
});
Copy
type: aws:cloudfront:ResponseHeadersPolicy
properties:
    comment: string
    corsConfig:
        accessControlAllowCredentials: false
        accessControlAllowHeaders:
            items:
                - string
        accessControlAllowMethods:
            items:
                - string
        accessControlAllowOrigins:
            items:
                - string
        accessControlExposeHeaders:
            items:
                - string
        accessControlMaxAgeSec: 0
        originOverride: false
    customHeadersConfig:
        items:
            - header: string
              override: false
              value: string
    etag: string
    name: string
    removeHeadersConfig:
        items:
            - header: string
    securityHeadersConfig:
        contentSecurityPolicy:
            contentSecurityPolicy: string
            override: false
        contentTypeOptions:
            override: false
        frameOptions:
            frameOption: string
            override: false
        referrerPolicy:
            override: false
            referrerPolicy: string
        strictTransportSecurity:
            accessControlMaxAgeSec: 0
            includeSubdomains: false
            override: false
            preload: false
        xssProtection:
            modeBlock: false
            override: false
            protection: false
            reportUri: string
    serverTimingHeadersConfig:
        enabled: false
        samplingRate: 0
Copy

ResponseHeadersPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ResponseHeadersPolicy resource accepts the following input properties:

Comment string
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
CorsConfig ResponseHeadersPolicyCorsConfig
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
CustomHeadersConfig ResponseHeadersPolicyCustomHeadersConfig
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
Etag string
The current version of the response headers policy.
Name string
A unique name to identify the response headers policy.
RemoveHeadersConfig ResponseHeadersPolicyRemoveHeadersConfig
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
SecurityHeadersConfig ResponseHeadersPolicySecurityHeadersConfig
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
ServerTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfig
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
Comment string
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
CorsConfig ResponseHeadersPolicyCorsConfigArgs
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
CustomHeadersConfig ResponseHeadersPolicyCustomHeadersConfigArgs
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
Etag string
The current version of the response headers policy.
Name string
A unique name to identify the response headers policy.
RemoveHeadersConfig ResponseHeadersPolicyRemoveHeadersConfigArgs
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
SecurityHeadersConfig ResponseHeadersPolicySecurityHeadersConfigArgs
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
ServerTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfigArgs
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
comment String
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
corsConfig ResponseHeadersPolicyCorsConfig
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
customHeadersConfig ResponseHeadersPolicyCustomHeadersConfig
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag String
The current version of the response headers policy.
name String
A unique name to identify the response headers policy.
removeHeadersConfig ResponseHeadersPolicyRemoveHeadersConfig
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
securityHeadersConfig ResponseHeadersPolicySecurityHeadersConfig
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
serverTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfig
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
comment string
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
corsConfig ResponseHeadersPolicyCorsConfig
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
customHeadersConfig ResponseHeadersPolicyCustomHeadersConfig
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag string
The current version of the response headers policy.
name string
A unique name to identify the response headers policy.
removeHeadersConfig ResponseHeadersPolicyRemoveHeadersConfig
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
securityHeadersConfig ResponseHeadersPolicySecurityHeadersConfig
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
serverTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfig
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
comment str
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
cors_config ResponseHeadersPolicyCorsConfigArgs
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
custom_headers_config ResponseHeadersPolicyCustomHeadersConfigArgs
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag str
The current version of the response headers policy.
name str
A unique name to identify the response headers policy.
remove_headers_config ResponseHeadersPolicyRemoveHeadersConfigArgs
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
security_headers_config ResponseHeadersPolicySecurityHeadersConfigArgs
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
server_timing_headers_config ResponseHeadersPolicyServerTimingHeadersConfigArgs
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
comment String
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
corsConfig Property Map
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
customHeadersConfig Property Map
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag String
The current version of the response headers policy.
name String
A unique name to identify the response headers policy.
removeHeadersConfig Property Map
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
securityHeadersConfig Property Map
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
serverTimingHeadersConfig Property Map
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.

Outputs

All input properties are implicitly available as output properties. Additionally, the ResponseHeadersPolicy resource produces the following output properties:

Arn string
The response headers policy ARN.
Id string
The provider-assigned unique ID for this managed resource.
Arn string
The response headers policy ARN.
Id string
The provider-assigned unique ID for this managed resource.
arn String
The response headers policy ARN.
id String
The provider-assigned unique ID for this managed resource.
arn string
The response headers policy ARN.
id string
The provider-assigned unique ID for this managed resource.
arn str
The response headers policy ARN.
id str
The provider-assigned unique ID for this managed resource.
arn String
The response headers policy ARN.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing ResponseHeadersPolicy Resource

Get an existing ResponseHeadersPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ResponseHeadersPolicyState, opts?: CustomResourceOptions): ResponseHeadersPolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        comment: Optional[str] = None,
        cors_config: Optional[ResponseHeadersPolicyCorsConfigArgs] = None,
        custom_headers_config: Optional[ResponseHeadersPolicyCustomHeadersConfigArgs] = None,
        etag: Optional[str] = None,
        name: Optional[str] = None,
        remove_headers_config: Optional[ResponseHeadersPolicyRemoveHeadersConfigArgs] = None,
        security_headers_config: Optional[ResponseHeadersPolicySecurityHeadersConfigArgs] = None,
        server_timing_headers_config: Optional[ResponseHeadersPolicyServerTimingHeadersConfigArgs] = None) -> ResponseHeadersPolicy
func GetResponseHeadersPolicy(ctx *Context, name string, id IDInput, state *ResponseHeadersPolicyState, opts ...ResourceOption) (*ResponseHeadersPolicy, error)
public static ResponseHeadersPolicy Get(string name, Input<string> id, ResponseHeadersPolicyState? state, CustomResourceOptions? opts = null)
public static ResponseHeadersPolicy get(String name, Output<String> id, ResponseHeadersPolicyState state, CustomResourceOptions options)
resources:  _:    type: aws:cloudfront:ResponseHeadersPolicy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Arn string
The response headers policy ARN.
Comment string
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
CorsConfig ResponseHeadersPolicyCorsConfig
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
CustomHeadersConfig ResponseHeadersPolicyCustomHeadersConfig
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
Etag string
The current version of the response headers policy.
Name string
A unique name to identify the response headers policy.
RemoveHeadersConfig ResponseHeadersPolicyRemoveHeadersConfig
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
SecurityHeadersConfig ResponseHeadersPolicySecurityHeadersConfig
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
ServerTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfig
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
Arn string
The response headers policy ARN.
Comment string
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
CorsConfig ResponseHeadersPolicyCorsConfigArgs
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
CustomHeadersConfig ResponseHeadersPolicyCustomHeadersConfigArgs
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
Etag string
The current version of the response headers policy.
Name string
A unique name to identify the response headers policy.
RemoveHeadersConfig ResponseHeadersPolicyRemoveHeadersConfigArgs
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
SecurityHeadersConfig ResponseHeadersPolicySecurityHeadersConfigArgs
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
ServerTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfigArgs
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
arn String
The response headers policy ARN.
comment String
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
corsConfig ResponseHeadersPolicyCorsConfig
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
customHeadersConfig ResponseHeadersPolicyCustomHeadersConfig
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag String
The current version of the response headers policy.
name String
A unique name to identify the response headers policy.
removeHeadersConfig ResponseHeadersPolicyRemoveHeadersConfig
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
securityHeadersConfig ResponseHeadersPolicySecurityHeadersConfig
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
serverTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfig
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
arn string
The response headers policy ARN.
comment string
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
corsConfig ResponseHeadersPolicyCorsConfig
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
customHeadersConfig ResponseHeadersPolicyCustomHeadersConfig
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag string
The current version of the response headers policy.
name string
A unique name to identify the response headers policy.
removeHeadersConfig ResponseHeadersPolicyRemoveHeadersConfig
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
securityHeadersConfig ResponseHeadersPolicySecurityHeadersConfig
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
serverTimingHeadersConfig ResponseHeadersPolicyServerTimingHeadersConfig
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
arn str
The response headers policy ARN.
comment str
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
cors_config ResponseHeadersPolicyCorsConfigArgs
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
custom_headers_config ResponseHeadersPolicyCustomHeadersConfigArgs
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag str
The current version of the response headers policy.
name str
A unique name to identify the response headers policy.
remove_headers_config ResponseHeadersPolicyRemoveHeadersConfigArgs
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
security_headers_config ResponseHeadersPolicySecurityHeadersConfigArgs
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
server_timing_headers_config ResponseHeadersPolicyServerTimingHeadersConfigArgs
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.
arn String
The response headers policy ARN.
comment String
A comment to describe the response headers policy. The comment cannot be longer than 128 characters.
corsConfig Property Map
A configuration for a set of HTTP response headers that are used for Cross-Origin Resource Sharing (CORS). See Cors Config for more information.
customHeadersConfig Property Map
Object that contains an attribute items that contains a list of custom headers. See Custom Header for more information.
etag String
The current version of the response headers policy.
name String
A unique name to identify the response headers policy.
removeHeadersConfig Property Map
A configuration for a set of HTTP headers to remove from the HTTP response. Object that contains an attribute items that contains a list of headers. See Remove Header for more information.
securityHeadersConfig Property Map
A configuration for a set of security-related HTTP response headers. See Security Headers Config for more information.
serverTimingHeadersConfig Property Map
A configuration for enabling the Server-Timing header in HTTP responses sent from CloudFront. See Server Timing Headers Config for more information.

Supporting Types

ResponseHeadersPolicyCorsConfig
, ResponseHeadersPolicyCorsConfigArgs

AccessControlAllowCredentials This property is required. bool
A Boolean value that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
AccessControlAllowHeaders This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowHeaders
Object that contains an attribute items that contains a list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header.
AccessControlAllowMethods This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowMethods
Object that contains an attribute items that contains a list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Valid values: GET | POST | OPTIONS | PUT | DELETE | HEAD | ALL
AccessControlAllowOrigins This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowOrigins
Object that contains an attribute items that contains a list of origins that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header.
OriginOverride This property is required. bool
A Boolean value that determines how CloudFront behaves for the HTTP response header.
AccessControlExposeHeaders ResponseHeadersPolicyCorsConfigAccessControlExposeHeaders
Object that contains an attribute items that contains a list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header.
AccessControlMaxAgeSec int
A number that CloudFront uses as the value for the Access-Control-Max-Age HTTP response header.
AccessControlAllowCredentials This property is required. bool
A Boolean value that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
AccessControlAllowHeaders This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowHeaders
Object that contains an attribute items that contains a list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header.
AccessControlAllowMethods This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowMethods
Object that contains an attribute items that contains a list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Valid values: GET | POST | OPTIONS | PUT | DELETE | HEAD | ALL
AccessControlAllowOrigins This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowOrigins
Object that contains an attribute items that contains a list of origins that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header.
OriginOverride This property is required. bool
A Boolean value that determines how CloudFront behaves for the HTTP response header.
AccessControlExposeHeaders ResponseHeadersPolicyCorsConfigAccessControlExposeHeaders
Object that contains an attribute items that contains a list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header.
AccessControlMaxAgeSec int
A number that CloudFront uses as the value for the Access-Control-Max-Age HTTP response header.
accessControlAllowCredentials This property is required. Boolean
A Boolean value that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
accessControlAllowHeaders This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowHeaders
Object that contains an attribute items that contains a list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header.
accessControlAllowMethods This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowMethods
Object that contains an attribute items that contains a list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Valid values: GET | POST | OPTIONS | PUT | DELETE | HEAD | ALL
accessControlAllowOrigins This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowOrigins
Object that contains an attribute items that contains a list of origins that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header.
originOverride This property is required. Boolean
A Boolean value that determines how CloudFront behaves for the HTTP response header.
accessControlExposeHeaders ResponseHeadersPolicyCorsConfigAccessControlExposeHeaders
Object that contains an attribute items that contains a list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header.
accessControlMaxAgeSec Integer
A number that CloudFront uses as the value for the Access-Control-Max-Age HTTP response header.
accessControlAllowCredentials This property is required. boolean
A Boolean value that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
accessControlAllowHeaders This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowHeaders
Object that contains an attribute items that contains a list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header.
accessControlAllowMethods This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowMethods
Object that contains an attribute items that contains a list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Valid values: GET | POST | OPTIONS | PUT | DELETE | HEAD | ALL
accessControlAllowOrigins This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowOrigins
Object that contains an attribute items that contains a list of origins that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header.
originOverride This property is required. boolean
A Boolean value that determines how CloudFront behaves for the HTTP response header.
accessControlExposeHeaders ResponseHeadersPolicyCorsConfigAccessControlExposeHeaders
Object that contains an attribute items that contains a list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header.
accessControlMaxAgeSec number
A number that CloudFront uses as the value for the Access-Control-Max-Age HTTP response header.
access_control_allow_credentials This property is required. bool
A Boolean value that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
access_control_allow_headers This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowHeaders
Object that contains an attribute items that contains a list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header.
access_control_allow_methods This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowMethods
Object that contains an attribute items that contains a list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Valid values: GET | POST | OPTIONS | PUT | DELETE | HEAD | ALL
access_control_allow_origins This property is required. ResponseHeadersPolicyCorsConfigAccessControlAllowOrigins
Object that contains an attribute items that contains a list of origins that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header.
origin_override This property is required. bool
A Boolean value that determines how CloudFront behaves for the HTTP response header.
access_control_expose_headers ResponseHeadersPolicyCorsConfigAccessControlExposeHeaders
Object that contains an attribute items that contains a list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header.
access_control_max_age_sec int
A number that CloudFront uses as the value for the Access-Control-Max-Age HTTP response header.
accessControlAllowCredentials This property is required. Boolean
A Boolean value that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
accessControlAllowHeaders This property is required. Property Map
Object that contains an attribute items that contains a list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header.
accessControlAllowMethods This property is required. Property Map
Object that contains an attribute items that contains a list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Valid values: GET | POST | OPTIONS | PUT | DELETE | HEAD | ALL
accessControlAllowOrigins This property is required. Property Map
Object that contains an attribute items that contains a list of origins that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header.
originOverride This property is required. Boolean
A Boolean value that determines how CloudFront behaves for the HTTP response header.
accessControlExposeHeaders Property Map
Object that contains an attribute items that contains a list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header.
accessControlMaxAgeSec Number
A number that CloudFront uses as the value for the Access-Control-Max-Age HTTP response header.

ResponseHeadersPolicyCorsConfigAccessControlAllowHeaders
, ResponseHeadersPolicyCorsConfigAccessControlAllowHeadersArgs

Items List<string>
Items []string
items List<String>
items string[]
items Sequence[str]
items List<String>

ResponseHeadersPolicyCorsConfigAccessControlAllowMethods
, ResponseHeadersPolicyCorsConfigAccessControlAllowMethodsArgs

Items List<string>
Items []string
items List<String>
items string[]
items Sequence[str]
items List<String>

ResponseHeadersPolicyCorsConfigAccessControlAllowOrigins
, ResponseHeadersPolicyCorsConfigAccessControlAllowOriginsArgs

Items List<string>
Items []string
items List<String>
items string[]
items Sequence[str]
items List<String>

ResponseHeadersPolicyCorsConfigAccessControlExposeHeaders
, ResponseHeadersPolicyCorsConfigAccessControlExposeHeadersArgs

Items List<string>
Items []string
items List<String>
items string[]
items Sequence[str]
items List<String>

ResponseHeadersPolicyCustomHeadersConfig
, ResponseHeadersPolicyCustomHeadersConfigArgs

ResponseHeadersPolicyCustomHeadersConfigItem
, ResponseHeadersPolicyCustomHeadersConfigItemArgs

Header This property is required. string
Override This property is required. bool
Value This property is required. string
The value for the HTTP response header.
Header This property is required. string
Override This property is required. bool
Value This property is required. string
The value for the HTTP response header.
header This property is required. String
override This property is required. Boolean
value This property is required. String
The value for the HTTP response header.
header This property is required. string
override This property is required. boolean
value This property is required. string
The value for the HTTP response header.
header This property is required. str
override This property is required. bool
value This property is required. str
The value for the HTTP response header.
header This property is required. String
override This property is required. Boolean
value This property is required. String
The value for the HTTP response header.

ResponseHeadersPolicyRemoveHeadersConfig
, ResponseHeadersPolicyRemoveHeadersConfigArgs

ResponseHeadersPolicyRemoveHeadersConfigItem
, ResponseHeadersPolicyRemoveHeadersConfigItemArgs

Header This property is required. string
Header This property is required. string
header This property is required. String
header This property is required. string
header This property is required. str
header This property is required. String

ResponseHeadersPolicySecurityHeadersConfig
, ResponseHeadersPolicySecurityHeadersConfigArgs

ContentSecurityPolicy ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicy
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header. See Content Security Policy for more information.
ContentTypeOptions ResponseHeadersPolicySecurityHeadersConfigContentTypeOptions
Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff. See Content Type Options for more information.
FrameOptions ResponseHeadersPolicySecurityHeadersConfigFrameOptions
Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header’s value. See Frame Options for more information.
ReferrerPolicy ResponseHeadersPolicySecurityHeadersConfigReferrerPolicy
Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header’s value. See Referrer Policy for more information.
StrictTransportSecurity ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurity
Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header’s value. See Strict Transport Security for more information.
XssProtection ResponseHeadersPolicySecurityHeadersConfigXssProtection
Determine whether CloudFront includes the X-XSS-Protection HTTP response header and the header’s value. See XSS Protection for more information.
ContentSecurityPolicy ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicy
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header. See Content Security Policy for more information.
ContentTypeOptions ResponseHeadersPolicySecurityHeadersConfigContentTypeOptions
Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff. See Content Type Options for more information.
FrameOptions ResponseHeadersPolicySecurityHeadersConfigFrameOptions
Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header’s value. See Frame Options for more information.
ReferrerPolicy ResponseHeadersPolicySecurityHeadersConfigReferrerPolicy
Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header’s value. See Referrer Policy for more information.
StrictTransportSecurity ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurity
Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header’s value. See Strict Transport Security for more information.
XssProtection ResponseHeadersPolicySecurityHeadersConfigXssProtection
Determine whether CloudFront includes the X-XSS-Protection HTTP response header and the header’s value. See XSS Protection for more information.
contentSecurityPolicy ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicy
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header. See Content Security Policy for more information.
contentTypeOptions ResponseHeadersPolicySecurityHeadersConfigContentTypeOptions
Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff. See Content Type Options for more information.
frameOptions ResponseHeadersPolicySecurityHeadersConfigFrameOptions
Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header’s value. See Frame Options for more information.
referrerPolicy ResponseHeadersPolicySecurityHeadersConfigReferrerPolicy
Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header’s value. See Referrer Policy for more information.
strictTransportSecurity ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurity
Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header’s value. See Strict Transport Security for more information.
xssProtection ResponseHeadersPolicySecurityHeadersConfigXssProtection
Determine whether CloudFront includes the X-XSS-Protection HTTP response header and the header’s value. See XSS Protection for more information.
contentSecurityPolicy ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicy
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header. See Content Security Policy for more information.
contentTypeOptions ResponseHeadersPolicySecurityHeadersConfigContentTypeOptions
Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff. See Content Type Options for more information.
frameOptions ResponseHeadersPolicySecurityHeadersConfigFrameOptions
Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header’s value. See Frame Options for more information.
referrerPolicy ResponseHeadersPolicySecurityHeadersConfigReferrerPolicy
Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header’s value. See Referrer Policy for more information.
strictTransportSecurity ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurity
Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header’s value. See Strict Transport Security for more information.
xssProtection ResponseHeadersPolicySecurityHeadersConfigXssProtection
Determine whether CloudFront includes the X-XSS-Protection HTTP response header and the header’s value. See XSS Protection for more information.
content_security_policy ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicy
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header. See Content Security Policy for more information.
content_type_options ResponseHeadersPolicySecurityHeadersConfigContentTypeOptions
Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff. See Content Type Options for more information.
frame_options ResponseHeadersPolicySecurityHeadersConfigFrameOptions
Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header’s value. See Frame Options for more information.
referrer_policy ResponseHeadersPolicySecurityHeadersConfigReferrerPolicy
Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header’s value. See Referrer Policy for more information.
strict_transport_security ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurity
Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header’s value. See Strict Transport Security for more information.
xss_protection ResponseHeadersPolicySecurityHeadersConfigXssProtection
Determine whether CloudFront includes the X-XSS-Protection HTTP response header and the header’s value. See XSS Protection for more information.
contentSecurityPolicy Property Map
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header. See Content Security Policy for more information.
contentTypeOptions Property Map
Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff. See Content Type Options for more information.
frameOptions Property Map
Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header’s value. See Frame Options for more information.
referrerPolicy Property Map
Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header’s value. See Referrer Policy for more information.
strictTransportSecurity Property Map
Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header’s value. See Strict Transport Security for more information.
xssProtection Property Map
Determine whether CloudFront includes the X-XSS-Protection HTTP response header and the header’s value. See XSS Protection for more information.

ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicy
, ResponseHeadersPolicySecurityHeadersConfigContentSecurityPolicyArgs

ContentSecurityPolicy This property is required. string
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.
Override This property is required. bool
Whether CloudFront overrides the Content-Security-Policy HTTP response header received from the origin with the one specified in this response headers policy.
ContentSecurityPolicy This property is required. string
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.
Override This property is required. bool
Whether CloudFront overrides the Content-Security-Policy HTTP response header received from the origin with the one specified in this response headers policy.
contentSecurityPolicy This property is required. String
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.
override This property is required. Boolean
Whether CloudFront overrides the Content-Security-Policy HTTP response header received from the origin with the one specified in this response headers policy.
contentSecurityPolicy This property is required. string
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.
override This property is required. boolean
Whether CloudFront overrides the Content-Security-Policy HTTP response header received from the origin with the one specified in this response headers policy.
content_security_policy This property is required. str
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.
override This property is required. bool
Whether CloudFront overrides the Content-Security-Policy HTTP response header received from the origin with the one specified in this response headers policy.
contentSecurityPolicy This property is required. String
The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.
override This property is required. Boolean
Whether CloudFront overrides the Content-Security-Policy HTTP response header received from the origin with the one specified in this response headers policy.

ResponseHeadersPolicySecurityHeadersConfigContentTypeOptions
, ResponseHeadersPolicySecurityHeadersConfigContentTypeOptionsArgs

Override This property is required. bool
Whether CloudFront overrides the X-Content-Type-Options HTTP response header received from the origin with the one specified in this response headers policy.
Override This property is required. bool
Whether CloudFront overrides the X-Content-Type-Options HTTP response header received from the origin with the one specified in this response headers policy.
override This property is required. Boolean
Whether CloudFront overrides the X-Content-Type-Options HTTP response header received from the origin with the one specified in this response headers policy.
override This property is required. boolean
Whether CloudFront overrides the X-Content-Type-Options HTTP response header received from the origin with the one specified in this response headers policy.
override This property is required. bool
Whether CloudFront overrides the X-Content-Type-Options HTTP response header received from the origin with the one specified in this response headers policy.
override This property is required. Boolean
Whether CloudFront overrides the X-Content-Type-Options HTTP response header received from the origin with the one specified in this response headers policy.

ResponseHeadersPolicySecurityHeadersConfigFrameOptions
, ResponseHeadersPolicySecurityHeadersConfigFrameOptionsArgs

FrameOption This property is required. string
The value of the X-Frame-Options HTTP response header. Valid values: DENY | SAMEORIGIN
Override This property is required. bool
Whether CloudFront overrides the X-Frame-Options HTTP response header received from the origin with the one specified in this response headers policy.
FrameOption This property is required. string
The value of the X-Frame-Options HTTP response header. Valid values: DENY | SAMEORIGIN
Override This property is required. bool
Whether CloudFront overrides the X-Frame-Options HTTP response header received from the origin with the one specified in this response headers policy.
frameOption This property is required. String
The value of the X-Frame-Options HTTP response header. Valid values: DENY | SAMEORIGIN
override This property is required. Boolean
Whether CloudFront overrides the X-Frame-Options HTTP response header received from the origin with the one specified in this response headers policy.
frameOption This property is required. string
The value of the X-Frame-Options HTTP response header. Valid values: DENY | SAMEORIGIN
override This property is required. boolean
Whether CloudFront overrides the X-Frame-Options HTTP response header received from the origin with the one specified in this response headers policy.
frame_option This property is required. str
The value of the X-Frame-Options HTTP response header. Valid values: DENY | SAMEORIGIN
override This property is required. bool
Whether CloudFront overrides the X-Frame-Options HTTP response header received from the origin with the one specified in this response headers policy.
frameOption This property is required. String
The value of the X-Frame-Options HTTP response header. Valid values: DENY | SAMEORIGIN
override This property is required. Boolean
Whether CloudFront overrides the X-Frame-Options HTTP response header received from the origin with the one specified in this response headers policy.

ResponseHeadersPolicySecurityHeadersConfigReferrerPolicy
, ResponseHeadersPolicySecurityHeadersConfigReferrerPolicyArgs

Override This property is required. bool
Whether CloudFront overrides the Referrer-Policy HTTP response header received from the origin with the one specified in this response headers policy.
ReferrerPolicy This property is required. string
The value of the Referrer-Policy HTTP response header. Valid Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url
Override This property is required. bool
Whether CloudFront overrides the Referrer-Policy HTTP response header received from the origin with the one specified in this response headers policy.
ReferrerPolicy This property is required. string
The value of the Referrer-Policy HTTP response header. Valid Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url
override This property is required. Boolean
Whether CloudFront overrides the Referrer-Policy HTTP response header received from the origin with the one specified in this response headers policy.
referrerPolicy This property is required. String
The value of the Referrer-Policy HTTP response header. Valid Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url
override This property is required. boolean
Whether CloudFront overrides the Referrer-Policy HTTP response header received from the origin with the one specified in this response headers policy.
referrerPolicy This property is required. string
The value of the Referrer-Policy HTTP response header. Valid Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url
override This property is required. bool
Whether CloudFront overrides the Referrer-Policy HTTP response header received from the origin with the one specified in this response headers policy.
referrer_policy This property is required. str
The value of the Referrer-Policy HTTP response header. Valid Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url
override This property is required. Boolean
Whether CloudFront overrides the Referrer-Policy HTTP response header received from the origin with the one specified in this response headers policy.
referrerPolicy This property is required. String
The value of the Referrer-Policy HTTP response header. Valid Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url

ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurity
, ResponseHeadersPolicySecurityHeadersConfigStrictTransportSecurityArgs

AccessControlMaxAgeSec This property is required. int
A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
Override This property is required. bool
Whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
IncludeSubdomains bool
Whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
Preload bool
Whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.
AccessControlMaxAgeSec This property is required. int
A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
Override This property is required. bool
Whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
IncludeSubdomains bool
Whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
Preload bool
Whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.
accessControlMaxAgeSec This property is required. Integer
A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
override This property is required. Boolean
Whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
includeSubdomains Boolean
Whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
preload Boolean
Whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.
accessControlMaxAgeSec This property is required. number
A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
override This property is required. boolean
Whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
includeSubdomains boolean
Whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
preload boolean
Whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.
access_control_max_age_sec This property is required. int
A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
override This property is required. bool
Whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
include_subdomains bool
Whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
preload bool
Whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.
accessControlMaxAgeSec This property is required. Number
A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
override This property is required. Boolean
Whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
includeSubdomains Boolean
Whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
preload Boolean
Whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.

ResponseHeadersPolicySecurityHeadersConfigXssProtection
, ResponseHeadersPolicySecurityHeadersConfigXssProtectionArgs

Override This property is required. bool
Whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
Protection This property is required. bool
A Boolean value that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
ModeBlock bool
Whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
ReportUri string
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header. You cannot specify a report_uri when mode_block is true.
Override This property is required. bool
Whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
Protection This property is required. bool
A Boolean value that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
ModeBlock bool
Whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
ReportUri string
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header. You cannot specify a report_uri when mode_block is true.
override This property is required. Boolean
Whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
protection This property is required. Boolean
A Boolean value that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
modeBlock Boolean
Whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
reportUri String
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header. You cannot specify a report_uri when mode_block is true.
override This property is required. boolean
Whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
protection This property is required. boolean
A Boolean value that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
modeBlock boolean
Whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
reportUri string
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header. You cannot specify a report_uri when mode_block is true.
override This property is required. bool
Whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
protection This property is required. bool
A Boolean value that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
mode_block bool
Whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
report_uri str
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header. You cannot specify a report_uri when mode_block is true.
override This property is required. Boolean
Whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
protection This property is required. Boolean
A Boolean value that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
modeBlock Boolean
Whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
reportUri String
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header. You cannot specify a report_uri when mode_block is true.

ResponseHeadersPolicyServerTimingHeadersConfig
, ResponseHeadersPolicyServerTimingHeadersConfigArgs

Enabled This property is required. bool
A Whether CloudFront adds the Server-Timing header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy.
SamplingRate This property is required. double
A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the Server-Timing header to. Valid range: Minimum value of 0.0. Maximum value of 100.0.
Enabled This property is required. bool
A Whether CloudFront adds the Server-Timing header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy.
SamplingRate This property is required. float64
A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the Server-Timing header to. Valid range: Minimum value of 0.0. Maximum value of 100.0.
enabled This property is required. Boolean
A Whether CloudFront adds the Server-Timing header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy.
samplingRate This property is required. Double
A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the Server-Timing header to. Valid range: Minimum value of 0.0. Maximum value of 100.0.
enabled This property is required. boolean
A Whether CloudFront adds the Server-Timing header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy.
samplingRate This property is required. number
A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the Server-Timing header to. Valid range: Minimum value of 0.0. Maximum value of 100.0.
enabled This property is required. bool
A Whether CloudFront adds the Server-Timing header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy.
sampling_rate This property is required. float
A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the Server-Timing header to. Valid range: Minimum value of 0.0. Maximum value of 100.0.
enabled This property is required. Boolean
A Whether CloudFront adds the Server-Timing header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy.
samplingRate This property is required. Number
A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the Server-Timing header to. Valid range: Minimum value of 0.0. Maximum value of 100.0.

Import

Using pulumi import, import Cloudfront Response Headers Policies using the id. For example:

$ pulumi import aws:cloudfront/responseHeadersPolicy:ResponseHeadersPolicy policy 658327ea-f89d-4fab-a63d-7e88639e58f9
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
AWS Classic pulumi/pulumi-aws
License
Apache-2.0
Notes
This Pulumi package is based on the aws Terraform Provider.
AWS v6.74.0 published on Wednesday, Mar 26, 2025 by Pulumi
pulumi/pulumi-aws