(cloudfront): Cache Policy cannot forward Authorization header.

[apoorvmote]

I am distributing HTTP API with cloudfront distribution and I wanted to forward Authorization Header.

#13408 (comment)

I was told to create cache policy with allow list

I get error Invalid request provided: AWS::CloudFront::CachePolicy

Reproduction Steps

As per the instructions #13408 (comment) I did

new CachePolicy(this, 'apiCachePolicy', {
      defaultTtl: Duration.minutes(0),
      maxTtl: Duration.minutes(0),
      minTtl: Duration.minutes(0),
      headerBehavior: CacheHeaderBehavior.allowList('Authorization'),
    })

So I went to the cloudfront console and added new policy

What did you expect to happen?

As per documentation https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-authorization-header/
I should be able to forward Authorization header with cache policy.

What actually happened?

When I set default, max & min ttl to zero then all remaining options are disabled.

Environment

• CDK CLI Version : 1.92.0
• Framework Version:
• Node.js Version: 14.16.0
• OS : Ubuntu 20.04 WSL2
• Language (Version): Typescript ~3.9.7

Other

---

This is 🐛 Bug Report

[njlynch]

I see you got help in the linked issue; the quick answer is that a cache policy must have some TTL set to non-zero value to allow for any other settings, so setting a maxTTL of 1 second is sufficient.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.