# Amazon CloudFront & WAF & Shield ## Amazon CloudFront ## AWS WAF 設定阻擋台灣IP & 只允許特定IP連入 Web ACLs -> Rules IP sets (設定允許或阻擋IP) ## AWS Certificate Manager (ACM) CloudFront - 一般 ![image](https://hackmd.io/_uploads/ByFNzMaxA.png) ※ 備用網域名稱要記得設定 --- - 安全 ![image](https://hackmd.io/_uploads/BkNFMfpx0.png) --- - 來源 ![image](https://hackmd.io/_uploads/S192MMal0.png) 來源類型-Elastic Load Balancing --- - 行為 ![image](https://hackmd.io/_uploads/HJA0ffTgA.png) 僅限 HTTPS 快取政策名稱-Managed-CachingOptimized 回應標頭政策名稱-Managed-CORS-with-preflight-and-SecurityHeadersPolicy