Is it possible to set HSTS headers on an Amazon CloudFront distribution from a S3 origin?
Amazon CloudFront – HSTS on Amazon CloudFront from S3 Origin
amazon-cloudfronthstsssl
Related Topic
- Ssl – Strict-Transport-Security on CloudFront with S3 origin
- Chrome S3 Cloudfront – Fix ‘No Access-Control-Allow-Origin’ Header on Initial XHR Request
- Why CloudFront does not return Access-Control-Allow-Origin
- Problems with Gzip compression on Amazon CloudFront
- How to Configure HSTS Redirect Prerequisites Using CloudFront
- Cloudfront – Prevent Cloudfront from Forwarding Part of Path to Origin Server
Best Answer
It is not currently possible, see https://forums.aws.amazon.com/thread.jspa?threadID=162252 for a discussion about it.
Edit: Lambda@Edge has made it possible, see below.