AWS Amazon CloudFront Service Limits

Length of the content security policy value in a response headers policy

Distributions associated with the same origin request policy

Distributions associated with the same response headers policy

File invalidation: maximum number of files allowed in active invalidation requests, excluding wildcard invalidations

Headers per origin request policy

Distributions associated with the same origin access control

Origins per distribution

Maximum number of aliases per distribution tenant

Maximum number of distribution tenants per AWS account

Maximum length of a field to encrypt

Maximum number of fields in a request body when field-level encryption is configured

Maximum number of parameters in a field in a multi-tenant distribution

Maximum number of distributions associated with the same trust store

Public keys in a single key group

VPC origins per AWS account

Distributions per AWS account that you can create triggers for

Key groups per AWS account

Function timeout for a viewer request and response event

CloudFront Functions: Maximum number of distributions associated with a single function

Maximum number of trust stores per AWS account

Connection attempts per origin

Cache behaviors per distribution

Cache policies per AWS account

Maximum number of fields to encrypt that can be specified in one profile

Whitelisted headers per cache behavior

Response headers policies

Cookies per cache policy

SSL certificates per AWS account when serving HTTPS requests using dedicated IP addresses

Maximum number of certificates per trust store

Custom headers: maximum length of all header values and names combined

Origin request policies per AWS account

Connection timeout per origin

Custom headers: maximum length of a header value

Maximum number of CloudFront distributions that can be associated with a field-level encryption configuration

Continuous deployment policies per AWS account

Origin groups per distribution

Whitelisted query strings per cache behavior

Whitelisted cookies per cache behavior

Custom headers per response headers policy

Maximum number of associations per web ACL

Maximum length of a URL

Distributions associated with the same VPC origin

Size of a response that is generated by a Lambda function, including headers and body (Origin request and response event)

Custom headers: maximum number of custom headers that you can configure CloudFront to add to origin requests

Cookies per origin request policy

Maximum number of connection functions per AWS account

Maximum number of characters total for all whitelisted query strings in the same parameter

Range of file sizes that CloudFront compresses

Request body size for viewer requests when returning from a Lambda function (text encoding)

Maximum number of multi-tenant distributions per AWS account

Triggers per distribution

Maximum CA bundle size per trust store

Request body size for origin requests exposed to a Lambda@Edge function.

Custom headers: maximum length of a header name

Maximum number of parameters per multi-tenant distribution

Web distributions per AWS account

Request body size for viewer requests exposed to a Lambda@Edge function.

Maximum certificate size in trust store CA bundle

Maximum number of connection groups per AWS account

Maximum number of public keys that can be added to one AWS account

Size of a response that is generated by a Lambda function, including headers and body (Viewer request and response event)

Query strings per cache policy

Keep-alive timeout for a custom origin associated with distribution

Maximum number of query argument profile mappings that can be included in a field-level encryption configuration

Maximum number of connection groups per Anycast static IP list

Request body size for origin requests when returning from a Lambda function (base64 encoding)

Maximum length of a request, including headers and query strings, but not including the body content

Alternate domain names (CNAMEs) per distribution

Response timeout per origin

Requests per second per distribution

Origin access identities per account

Total length of the URI including query string in a Lambda@Edge function

Removing headers from a response headers policy

Data transfer rate per distribution

Key groups associated with a single distribution

Origin response timeout (idle timeout)

Maximum compressed size of a Lambda function and any included libraries. (Viewer request and response event)

Distributions associated with the same cache policy

Maximum file size for HTTP GET, POST, and PUT requests

File invalidation: maximum number of active wildcard invalidations allowed

Staging distributions per AWS account

Distributions associated with a single key group

Maximum compressed size of a Lambda function and any included libraries. (Origin request and response event)

Total number of bytes in whitelisted cookie names (doesn’t apply if you configure CloudFront to forward all cookies to the origin)

Maximum number of characters in a whitelisted query string

Query strings per origin request policy

Tags that can be added to a distribution

Function timeout (Origin request and response event)

Maximum length of a request body when field-level encryption is configured

Maximum number of field-level encryption profiles that can be associated with one AWS account

SSL certificates that can be associated with a CloudFront web distribution

Request body size for origin requests when returning from a Lambda function (text encoding)

Maximum number of field-level encryption configurations that can be associated with one AWS account

Function memory size (Viewer request and response event)

Maximum number of parameters per distribution tenant

Headers per cache policy

Anycast static IP lists per AWS account

Request body size for viewer requests when returning from a Lambda function (base64 encoding)