Set by controls 4

Active controls fix these values.

• default_cache_behaviorobject({...}), set to nullThe default cache behavior for this distribution
• logging_configobject({...}), set to nullThe logging configuration that controls how logs are written to your distribution (maximum one)
• viewer_certificateobject({...}), set to {...}The SSL configuration for this distribution
• web_acl_idstring, set to nullIf you're using AWS WAF to filter CloudFront requests, the Id of the AWS WAF web ACL that is associated with the distribution. The WAF Web ACL must exist in the WAF Global (CloudFront) region and the credentials configuring this argument must have waf:GetWebACL permissions assigned. If using WAFv2, provide the ARN of the web ACL

Optional 37

• aliaseslist(string), default nullExtra CNAMEs (alternate domain names), if any, for this distribution
• anycast_ip_list_idstring, default nullID of the Anycast static IP list that is associated with the distribution
• cache_policiesmap({...}), default nullMap of CloudFront cache policies
• cache_tag_configobject({...}), default nullCache tag configuration block for cache tag extraction from origin responses (maximum one). See the [AWS documentation](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/invalidation-by-tags.html) for more information about cache tags
• cloudfront_functionsmap({...}), default nullMap of CloudFront Function configurations. Key is used as default function name if 'name' not specified
• commentstring, default nullAny comments you want to include about the distribution
• connection_function_association_idstring, default nullIdentifier of the connection function to associate with the distribution
• connection_function_codestring, default nullThe code of the CloudFront connection function
• connection_function_configobject({...}), default nullConfiguration block for the CloudFront connection function
• connection_function_namestring, default nullThe name of the CloudFront connection function
• connection_function_publishbool, default nullWhether to publish the function to the LIVE stage after creation or update. Defaults to false
• continuous_deployment_policy_idstring, default nullIdentifier of a continuous deployment policy. This argument should only be set on a production distribution
• createbool, default trueControls if resources should be created (affects nearly all resources)
• create_connection_functionbool, default falseControls whether to create a CloudFront connection function
• create_monitoring_subscriptionbool, default falseIf enabled, the resource for monitoring subscription will created
• custom_error_responselist({...}), default nullOne or more custom error response elements
• default_root_objectstring, default nullThe object that you want CloudFront to return (for example, index.html) when an end user requests the root URL
• enable_v2_loggingbool, default falseWhether to enable v2 logging for the CloudFront distribution
• enabledbool, default trueWhether the distribution is enabled to accept end user requests for content
• http_versionstring, default "http2"The maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. The default is http2
• is_ipv6_enabledbool, default trueWhether the IPv6 is enabled for the distribution
• ordered_cache_behaviorlist({...}), default []An ordered list of cache behaviors resource for this distribution. List from top to bottom in order of precedence. The topmost cache behavior will have precedence 0
• originmap({...}), default {}One or more origins for this distribution (multiples allowed)
• origin_access_controlmap({...}), default {...}Map of CloudFront origin access control
• origin_groupmap({...}), default nullOne or more origin_group for this distribution (multiples allowed)
• origin_request_policiesmap({...}), default nullMap of CloudFront origin request policies
• price_classstring, default nullThe price class for this distribution. One of PriceClass_All, PriceClass_200, PriceClass_100
• realtime_metrics_subscription_statusstring, default "Enabled"A flag that indicates whether additional CloudWatch metrics are enabled for a given CloudFront distribution. Valid values are Enabled and Disabled
• response_headers_policiesmap({...}), default nullMap of CloudFront response headers policies with their configurations
• restrictionsobject({...}), default {...}The restrictions configuration for this distribution
• retain_on_deletebool, default nullDisables the distribution instead of deleting it when destroying the resource through Terraform. If this is set, the distribution needs to be deleted manually afterwards
• stagingbool, default nullWhether the distribution is a staging distribution
• tagsmap(string), default {}A map of tags to add to all resources
• v2_loggingobject({...}), default nullConfiguration block for v2 logging destination
• viewer_mtls_configobject({...}), default nullThe viewer mTLS configuration for this distribution
• vpc_originmap({...}), default nullMap of CloudFront VPC origins
• wait_for_deploymentbool, default nullIf enabled, the resource will wait for the distribution status to change from InProgress to Deployed. Setting this to false will skip the process