Skip to content

feat(cloudfront): add Managed-HostHeaderOnly origin request policy - #38236

Merged
mergify[bot] merged 5 commits into
aws:mainfrom
Tietew:cf-policy-hostheaderonly
Jul 3, 2026
Merged

feat(cloudfront): add Managed-HostHeaderOnly origin request policy#38236
mergify[bot] merged 5 commits into
aws:mainfrom
Tietew:cf-policy-hostheaderonly

Conversation

@Tietew

@Tietew Tietew commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Issue # (if applicable)

Closes #38234.

Reason for this change

CloudFront introduces a managed origin request policy Managed-HostHeaderOnly.
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html#managed-origin-request-policy-host-header-only

This policy includes only the Host header from the origin request. It doesn't include any query strings or cookies.

Description of changes

  • Added a managed origin request policy OriginRequestPolicy.HOST_HEADER_ONLY.

Describe any new or updated permissions being added

N/A

Description of how you validated changes

  • Added a unit test to validate the policy id is correct.
  • Updated an integ test to validate managed policies are deployed successfully.

Checklist


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@github-actions github-actions Bot added feature-request A feature should be added or improved. p2 labels Jul 2, 2026
@aws-cdk-automation
aws-cdk-automation requested a review from a team July 2, 2026 09:02
@github-actions github-actions Bot added the distinguished-contributor [Pilot] contributed 50+ PRs to the CDK label Jul 2, 2026
@Tietew Tietew changed the title Cf policy hostheaderonly feat(cloudfront): add a managed origin request policy Managed-HostHeaderOnly Jul 2, 2026

@aws-cdk-automation aws-cdk-automation left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(This review is outdated)

@Tietew

Tietew commented Jul 2, 2026

Copy link
Copy Markdown
Contributor Author

Exemption Request

Currently, the README does not include a list of available managed policies.
It does not appear that any new managed policies need to be added.

@aws-cdk-automation aws-cdk-automation added the pr-linter/exemption-requested The contributor has requested an exemption to the PR Linter feedback. label Jul 2, 2026
@aws-cdk-automation aws-cdk-automation added the pr/needs-community-review This PR needs a review from a Trusted Community Member or Core Team Member. label Jul 2, 2026
@leonmk-aws leonmk-aws self-assigned this Jul 2, 2026
@leonmk-aws leonmk-aws added the pr/needs-integration-tests-deployment Requires the PR to deploy the integration test snapshots. label Jul 2, 2026
@leonmk-aws
leonmk-aws had a problem deploying to deployment-integ-test July 2, 2026 15:38 — with GitHub Actions Failure
@leonmk-aws leonmk-aws added the pr/request-cli-integ-tests Request CLI integ tests to be run. You will need to review the code and approve the deployment. label Jul 2, 2026
@leonmk-aws
leonmk-aws had a problem deploying to deployment-integ-test July 2, 2026 15:51 — with GitHub Actions Error
@leonmk-aws leonmk-aws removed the pr/request-cli-integ-tests Request CLI integ tests to be run. You will need to review the code and approve the deployment. label Jul 2, 2026
@leonmk-aws leonmk-aws added the pr-linter/exempt-readme The PR linter will not require README changes label Jul 2, 2026
@leonmk-aws
leonmk-aws had a problem deploying to deployment-integ-test July 2, 2026 15:53 — with GitHub Actions Error
@aws-cdk-automation
aws-cdk-automation dismissed their stale review July 2, 2026 15:54

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

@leonmk-aws leonmk-aws changed the title feat(cloudfront): add a managed origin request policy Managed-HostHeaderOnly feat(cloudfront): add Managed-HostHeaderOnly origin request policy Jul 2, 2026
@Tietew
Tietew temporarily deployed to deployment-integ-test July 3, 2026 06:05 — with GitHub Actions Inactive
@leonmk-aws leonmk-aws removed the pr/needs-integration-tests-deployment Requires the PR to deploy the integration test snapshots. label Jul 3, 2026

@leonmk-aws leonmk-aws left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for your contribution!

@mergify

mergify Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify

mergify Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Merge Queue Status

  • Entered queue2026-07-03 14:15 UTC · Rule: default-squash · triggered by rule automatic merge
  • Checks passed · in-place
  • Merged2026-07-03 14:53 UTC · at a610bc599450238a32d2048b28946fa3233e5e39 · squash

This pull request spent 37 minutes 17 seconds in the queue, including 37 minutes 2 seconds running CI.

Required conditions to merge

@mergify
mergify Bot temporarily deployed to automation July 3, 2026 14:16 Inactive
@mergify
mergify Bot temporarily deployed to automation July 3, 2026 14:16 Inactive
@mergify

mergify Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify
mergify Bot merged commit 0e66e47 into aws:main Jul 3, 2026
19 of 20 checks passed
@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Jul 3, 2026
@aws-cdk-automation aws-cdk-automation removed the pr/needs-community-review This PR needs a review from a Trusted Community Member or Core Team Member. label Jul 3, 2026
@Tietew
Tietew deleted the cf-policy-hostheaderonly branch July 4, 2026 02:28
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

distinguished-contributor [Pilot] contributed 50+ PRs to the CDK feature-request A feature should be added or improved. p2 pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exemption-requested The contributor has requested an exemption to the PR Linter feedback.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

cloudfront: missing a managed origin request policy Managed-HostHeaderOnly

3 participants