cloudfront-authorization-at-edge VS amazon-cloudfront-functions

CloudFront authorization@edge

aws.amazon.com Recognition The earlier AWS blog that investigated wiring up Cognito authentication with Lambda@Edge: https://aws.amazon.com/blogs/networking-and-content-delivery/authorizationedge-how-to-use-lambdaedge-and-json-web-tokens-to-enhance-web-application-security/ A gist that shows how to add Basic Authentication using Lambda@Edge: https://gist.github.com/lmakarov/e5984ec16a76548ff2b278c06027f1a4 An open-source project that uses a similar approach to secure CloudFront distributions, but does not yet support Cognito (at the time of this writing): https://github.com/Widen/cloudfront-auth Additional resources Check out the code on GitHub to see how the sample solution is built. You can deploy and run the code yourself: https://github.com/aws-samples/cloudfront-authorization-at-edge. You can deploy the Amazon Cognito resources from the sample solution directly from the AWS Serverless Application Repository. 10

This might help: https://github.com/aws-samples/cloudfront-authorization-at-edge

Alternatively, host on CloudFront with Lambda Edge protection as suggested. Here is a sample for that which is easy to deploy: https://github.com/aws-samples/cloudfront-authorization-at-edge

https://aws.amazon.com/blogs/networking-and-content-delivery/authorizationedge-using-cookies-protect-your-amazon-cloudfront-content-from-being-downloaded-by-unauthenticated-users/ 3.

I also found the Cognito + Cloudfront + Lambda Edge approach, but that seems complicated for what I'm doing and not sure if it'll solve my problem.

URL rewrite to append index.html to the URI for single page applications

I checked out this repo: https://github.com/aws-samples/amazon-cloudfront-functions but still had some questions for folks who are operating edge functions:

I referred to this AWS GitHub repository for JWT authentication source code. You can write the JWT authentication approach by yourself. It's up to you!

Create a CloudFront function and use the below code. https://github.com/aws-samples/amazon-cloudfront-functions/blob/main/url-rewrite-single-page-apps/index.js

Amazon CloudFront Functions

To learn more about CloudFront Functions, refer to the CloudFront Developer Guide or FAQs. A GitHub repository is also available with several examples that you can use as a starting point for building functions.

Then the last step was to use a Lambda@Edge function to rewrite the urls as is described in several walkthrough articles. However in the comments to this AWS compute blog describing the lambda@edge method, the author linked to the new, cheaper, faster cloudfront functions method here with the function already written here. Thanks again to everyone who helped, sympathised or encouraged me to go swimming in the docs.

Github: [https://github.com/ivlo11/serverless-patterns/tree/main/static-site-with-cloudfront-function] Documentation: [https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-functions.html] CloudFormation Documentation: [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-function.html] CloudFront Function Sample Code: [https://github.com/aws-samples/amazon-cloudfront-functions]

Check out this link for a few useful code samples.