You can have different caching rules per path:
To add:
Distribution β Behaviors β Create Behavior β Path pattern + settings. cloudfront net
aws cloudfront create-distribution \
--origin-domain-name my-bucket.s3.amazonaws.com \
--default-root-object index.html
Attach AWS WAF to block SQLi, XSS, rate-based rules, etc. You can have different caching rules per path:
Best practice: Always use a custom domain (e.g., cdn.yourdomain.com) with CloudFront. This gives you the performance benefits without exposing the cloudfront.net suffixβand it protects you if AWS ever changes their domain naming scheme. To add: Distribution β Behaviors β Create Behavior
Get the distribution domain name from console (e.g., d111111abcdef8.cloudfront.net). Open in browser:
https://d111111abcdef8.cloudfront.net/your-image.jpg