Then under âResponse headers policyâ select the AWS managed policy or your newly created policy and then Host headerë HTTP íë¡í ì½ì Host í¤ Configure CloudFront to forward the Host header to the origin I have also enabled forward headers to Origin and I am able to see the headers passed when I play the video. CloudFront missing authentication token In order to deal ⦠Choose Save changes. The sample code focuses on public, authenticated routes (Authorization header) and IAM signed request all being reverse proxied through ⦠Aws alb security headers. Forward Cookies: Select All: Query String Forwarding and Caching: Select Forward all, cache based on all Select the CloudFront Event to Viewer Response. A Cloudfront Mystery â blog - Brian Schiller Add HTTP Basic Authentication to CloudFront Distributions Click on Create Function and choose the CloudFront-modify-response-header blueprint. As stated above, this does cause a conflict with API Gateway because the HOST header doesn't match the request (request is coming from CloudFront, HOST is from the user) and so API Gateway will return a 403. Starting from the 3.64.0 version of Terraform AWS provider, you can create the security headers policies and apply them for your distribution. I'm not sure why they strip out the other X-Forwarded-* headers.