aws-cloudfront-origin-custom-header-value

CloudFront origin custom headers are returned in distribution configuration and are often used as shared origin-authentication secrets.

awscritical service: aws:cloudfront emits ContainsCredential

Where it sits

locationGetDistributionConfig.DistributionConfig.Origins.Items[].CustomHeaders.Items[].HeaderValue
location kindconfig_field
data kindscredential api_key bearer_token password
emits edgeContainsCredential
serviceCloudFront (aws:cloudfront)

Collection recipe

access moderead_api
operationGetDistributionConfig
response pathDistributionConfig.Origins.Items[].CustomHeaders.Items[].HeaderValue
encodingstring
params{"Id": "\u003cdistribution-id\u003e"}

Required permissions

cloudfront:GetDistributionConfig

References

move · open · esc close