aws-samples / amazon-cloudfront-secure-static-site

Create a secure static website with CloudFront for your registered domain.
Apache License 2.0
385 stars 140 forks source link

Use CloudFront response header policy instead of Lamda@Edge #40

Closed thomasturrell closed 2 years ago

thomasturrell commented 2 years ago

CloudFront now supports response header policies.

With the introduction of response header policies there is no need to use Lamda@Edge to add security headers.

Unlike Lamda@Edge CloudFront response headers policies do not have an additional cost.

ConnorKirk commented 2 years ago

I'm pleased to say this is now implemented. Thanks for opening an issue @thomasturrell