---
# System prepended metadata

title: ' CloudFront&WAF'

---

# Amazon CloudFront & WAF & Shield



## Amazon CloudFront


## AWS WAF

設定阻擋台灣IP & 只允許特定IP連入

Web ACLs -> Rules 

IP sets (設定允許或阻擋IP)
## AWS Certificate Manager (ACM)



CloudFront

- 一般
![image](https://hackmd.io/_uploads/ByFNzMaxA.png)

※ 備用網域名稱要記得設定

---

- 安全
![image](https://hackmd.io/_uploads/BkNFMfpx0.png)

---

- 來源
![image](https://hackmd.io/_uploads/S192MMal0.png)

來源類型-Elastic Load Balancing	

---
- 行為
![image](https://hackmd.io/_uploads/HJA0ffTgA.png)

僅限 HTTPS	

快取政策名稱-Managed-CachingOptimized

回應標頭政策名稱-Managed-CORS-with-preflight-and-SecurityHeadersPolicy


