VpcOrigin class

Creates an Amazon CloudFront VPC origin.

For information about CloudFront VPC origins, see Amazon CloudFront Developer Guide - Restrict access with VPC origins.

Example Usage

Application Load Balancer

The following example below creates a CloudFront VPC origin for a Application Load Balancer.

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const alb = new aws.cloudfront.VpcOrigin("alb", {vpcOriginEndpointConfig: {
    originSslProtocols: {
        items: ["TLSv1.2"],
        quantity: 1,
    },
    name: "example-vpc-origin",
    arn: _this.arn,
    httpPort: 8080,
    httpsPort: 8443,
    originProtocolPolicy: "https-only",
}});

import pulumi
import pulumi_aws as aws

alb = aws.cloudfront.VpcOrigin("alb", vpc_origin_endpoint_config={
    "origin_ssl_protocols": {
        "items": ["TLSv1.2"],
        "quantity": 1,
    },
    "name": "example-vpc-origin",
    "arn": this["arn"],
    "http_port": 8080,
    "https_port": 8443,
    "origin_protocol_policy": "https-only",
})

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() =>
{
    var alb = new Aws.CloudFront.VpcOrigin("alb", new()
    {
        VpcOriginEndpointConfig = new Aws.CloudFront.Inputs.VpcOriginVpcOriginEndpointConfigArgs
        {
            OriginSslProtocols = new Aws.CloudFront.Inputs.VpcOriginVpcOriginEndpointConfigOriginSslProtocolsArgs
            {
                Items = new[]
                {
                    "TLSv1.2",
                },
                Quantity = 1,
            },
            Name = "example-vpc-origin",
            Arn = @this.Arn,
            HttpPort = 8080,
            HttpsPort = 8443,
            OriginProtocolPolicy = "https-only",
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cloudfront"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudfront.NewVpcOrigin(ctx, "alb", &cloudfront.VpcOriginArgs{
			VpcOriginEndpointConfig: &cloudfront.VpcOriginVpcOriginEndpointConfigArgs{
				OriginSslProtocols: &cloudfront.VpcOriginVpcOriginEndpointConfigOriginSslProtocolsArgs{
					Items: pulumi.StringArray{
						pulumi.String("TLSv1.2"),
					},
					Quantity: pulumi.Int(1),
				},
				Name:                 pulumi.String("example-vpc-origin"),
				Arn:                  pulumi.Any(this.Arn),
				HttpPort:             pulumi.Int(8080),
				HttpsPort:            pulumi.Int(8443),
				OriginProtocolPolicy: pulumi.String("https-only"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_cloudfront_vpcorigin" "alb" {
  vpc_origin_endpoint_config = {
    origin_ssl_protocols = {
      items    = ["TLSv1.2"]
      quantity = 1
    }
    name                   = "example-vpc-origin"
    arn                    = this.arn
    http_port              = 8080
    https_port             = 8443
    origin_protocol_policy = "https-only"
  }
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cloudfront.VpcOrigin;
import com.pulumi.aws.cloudfront.VpcOriginArgs;
import com.pulumi.aws.cloudfront.inputs.VpcOriginVpcOriginEndpointConfigArgs;
import com.pulumi.aws.cloudfront.inputs.VpcOriginVpcOriginEndpointConfigOriginSslProtocolsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var alb = new VpcOrigin("alb", VpcOriginArgs.builder()
            .vpcOriginEndpointConfig(VpcOriginVpcOriginEndpointConfigArgs.builder()
                .originSslProtocols(VpcOriginVpcOriginEndpointConfigOriginSslProtocolsArgs.builder()
                    .items("TLSv1.2")
                    .quantity(1)
                    .build())
                .name("example-vpc-origin")
                .arn(this_.arn())
                .httpPort(8080)
                .httpsPort(8443)
                .originProtocolPolicy("https-only")
                .build())
            .build());

    }
}

resources:
  alb:
    type: aws:cloudfront:VpcOrigin
    properties:
      vpcOriginEndpointConfig:
        originSslProtocols:
          items:
            - TLSv1.2
          quantity: 1
        name: example-vpc-origin
        arn: ${this.arn}
        httpPort: 8080
        httpsPort: 8443
        originProtocolPolicy: https-only

Import

Using pulumi import, import Cloudfront VPC origins using the id. For example:

% pulumi import aws_cloudfront_vpc_origin vo_JQEa410sssUFoY6wMkx69j