360 Secure SkillHub
360 安全技能中心

routing-traffic-with-route53-and-cloudfront

该 Skill 提供使用 Amazon Route 53 将自定义域名流量路由到 CloudFront 的操作指引,涵盖 CloudFront 备用域名、位于 us-east-1 的 ACM 证书、公有托管区、别名 A/AAAA 记录、DNS 传播检查与常见故障排查;不包含自动化脚本或模板。

aws
热度 0.00
最近更新 2026-10-18 16:45:47
分类:开发依赖:纯提示词应用场景:DevOps / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add aws/agent-toolkit-for-aws/routing-traffic-with-route53-and-cloudfront
Metadata
name
routing-traffic-with-route53-and-cloudfront
description
Configures Amazon Route 53 to route traffic to a CloudFront distribution using a custom domain. Use when setting up DNS alias records, alternate domain names (CNAMEs), ACM certificates for HTTPS, and IPv6 support for CloudFront.
version
1

Routing Traffic with Route 53 and CloudFront

Overview

Domain expertise for configuring Amazon Route 53 to route traffic to Amazon CloudFront distributions using custom domain names. Covers hosted zone management, alias A/AAAA records, alternate domain name (CNAME) configuration, and ACM certificate setup for HTTPS.

Configure Route 53 to route traffic to a CloudFront distribution

To set up a custom domain for a CloudFront distribution with Route 53 DNS, follow the procedure exactly. See Route 53 CloudFront routing procedure.

The procedure covers:

  • Verifying CloudFront distribution status and CNAME configuration
  • Requesting and validating ACM certificates (must be in us-east-1)
  • Creating or locating public hosted zones
  • Creating alias A and AAAA records pointing to CloudFront
  • Monitoring DNS propagation

Troubleshooting

Domain not in CloudFront CNAMEs

Add the domain as an alternate domain name in the CloudFront distribution configuration before creating Route 53 records.

SSL certificate issues

ACM certificates for CloudFront must be in us-east-1. Ensure the certificate is validated and associated with the distribution.

Private hosted zone

CloudFront only works with public hosted zones. Create a public hosted zone if only a private one exists.

DNS propagation delays

Changes typically propagate within 60 seconds but full global propagation can take up to 48 hours. Use nslookup or dig to verify.