Is there an example cloudformation template with multiple CacheBehaviors defined?

Question

How do I use this in a template I found no examples: * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-cachebehaviors * https://docs.amazonaws.cn/en_us/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cachebehavior.html

I have a DefaultCacheBehavior defined and now I want to add addtional behaviours.

I tried this but I get an error:

  .....
  CFDistribution:
    Type: AWS::CloudFront::Distribution
    Properties:

      DistributionConfig:
        Enabled: 'true'
        Comment: 'sdlkfjsdlkfjsldkfj'
        PriceClass: 'PriceClass_All'
        IPV6Enabled: true
        DefaultRootObject: index.html
        Origins:
          -
            Id: Origin01 # arbitrary identifier
            S3OriginConfig: {}
            DomainName: 'mydomain.blhblhb.blhb.com'

        ViewerCertificate:
           AcmCertificateArn: 'my-cer-id'
           SslSupportMethod: sni-only
        DefaultCacheBehavior:
          TargetOriginId: Origin01
          ViewerProtocolPolicy: redirect-to-https
          Compress: true
          MinTTL: 0
          DefaultTTL: 3600
          MaxTTL: 31536000
          AllowedMethods:
            - GET
            - HEAD
          CachedMethods:
            - GET
            - HEAD
          ForwardedValues:
            QueryString: 'false'
            Headers:
              - Origin
              - CloudFront-Viewer-Country
            Cookies:
              Forward: none

        # Tried adding this but no workie
        CacheBehaviors:
          CacheBehavior:
            PathPattern: '/somepath/*'
            TargetOriginId: Origin01
            ViewerProtocolPolicy: redirect-to-https
            Compress: true
            MinTTL: 0
            DefaultTTL: 3600
            MaxTTL: 31536000
            AllowedMethods:
              - GET
              - HEAD
            CachedMethods:
              - GET
              - HEAD
            ForwardedValues:
              QueryString: 'false'
              Headers:
                - Origin
                - CloudFront-Viewer-Country
              Cookies:
                Forward: none
            LambdaFunctionAssociations:
              -
                EventType: origin-request
                LambdaFunctionARN: !Ref MyLambda.Version

I get error:

Property validation failure: [Value of property {/DistributionConfig/CacheBehaviors} does not match type {Array}]

You had a minor syntax error in how the list is arranged. fwiw I found the docs _slightly_ misleading too. I think they should be nested differently as it is they are disjointed which makes for issues like this of misinterpretation of formatting. — tijko, Feb 19 '23 at 19:55

score 5 · Answer 1 · answered Jan 15 '20 at 19:50

OK I was not googling hard enough: https://github.com/aws-samples/aws-refarch-wordpress/blob/master/templates/aws-refarch-wordpress-04-cloudfront.yaml

        ---
        AWSTemplateFormatVersion: 2010-09-09

        Description: Reference Architecture to host WordPress on AWS - Creates CloudFront distribution (if selected)

        Metadata:

          Authors:
            Description: Darryl Osborne (darrylo@amazon.com)
          License:
            Description: 'Copyright 2018 Amazon.com, Inc. and its affiliates. All Rights Reserved.
                          SPDX-License-Identifier: MIT-0'

          AWS::CloudFormation::Interface:
            ParameterGroups:
            - Label:
                default: AWS Parameters
              Parameters:
                - CloudFrontAcmCertificate
                - WPDomainName
                - PublicAlbDnsName
            ParameterLabels:
              CloudFrontAcmCertificate:
                default: CloudFront Certificate ARN
              PublicAlbDnsName:
                default: Public ALB DNS Name
              WPDomainName:
                default: Domain name of the WordPress site

        Parameters:

          CloudFrontAcmCertificate:
            AllowedPattern: ^$|(arn:aws:acm:)([a-z0-9/:-])*([a-z0-9])$
            Description: '[ Optional ] The AWS Certification Manager certificate ARN for the CloudFront distribution certificate - this certificate should be created in the us-east-1 (N. Virginia) region and must reference the WordPress domain name you use below.'
            Type: String
          PublicAlbDnsName:
            Description: The public application load balancer dns name.
            Type: String
          WPDomainName:
            AllowedPattern: ^$|(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\-]*[A-Za-z0-9])$
            Description: '[ Optional ] The main domain name of the WordPress site (e.g. example.com).'
            Type: String

        Conditions:

          SslCertificate:
            !Not [ !Equals [ '', !Ref CloudFrontAcmCertificate ] ]
          NoSslCertificate:
            !Equals [ '', !Ref CloudFrontAcmCertificate ]
          WPDomainName:
            !Not [ !Equals [ '', !Ref WPDomainName ] ]  
          NoWPDomainName:
            !Equals [ '', !Ref WPDomainName ]

        Resources:

          CloudFrontDistributionNoSslCertificate:
            Type: AWS::CloudFront::Distribution
            Condition: NoSslCertificate
            Properties:
              DistributionConfig:
                Aliases:
                - !If [ WPDomainName, !Join [ '', [ '*.', !Ref WPDomainName ] ], !Ref 'AWS::NoValue' ]
                CacheBehaviors:
                - PathPattern: wp-includes/*
                  AllowedMethods:
                  - DELETE
                  - GET
                  - HEAD
                  - OPTIONS
                  - PATCH
                  - POST
                  - PUT
                  DefaultTTL: 900
                  MaxTTL: 900
                  MinTTL: 900
                  ForwardedValues:
                    QueryString: true
                    Headers:
                    - Host
                  TargetOriginId: elb
                  ViewerProtocolPolicy: allow-all
                  Compress: true
                - PathPattern: wp-content/*
                  AllowedMethods:
                  - DELETE
                  - GET
                  - HEAD
                  - OPTIONS
                  - PATCH
                  - POST
                  - PUT
                  DefaultTTL: 900
                  MaxTTL: 900
                  MinTTL: 900
                  ForwardedValues:
                    QueryString: true
                    Headers:
                    - Host
                  TargetOriginId: elb
                  ViewerProtocolPolicy: allow-all
                  Compress: true
                Comment: !Ref 'AWS::StackName'
                DefaultCacheBehavior:
                  AllowedMethods:
                  - DELETE
                  - GET
                  - HEAD
                  - OPTIONS
                  - PATCH
                  - POST
                  - PUT
                  DefaultTTL: 0
                  MaxTTL: 0
                  MinTTL: 0
                  ForwardedValues:
                    QueryString: true
                    Headers:
                    - '*'
                    Cookies:
                      Forward: all
                  TargetOriginId: elb
                  ViewerProtocolPolicy: allow-all
                  Compress: true
                Enabled: true
                Origins:
                - DomainName: !Ref PublicAlbDnsName
                  Id: elb
                  CustomOriginConfig:
                    OriginProtocolPolicy: http-only
                PriceClass: PriceClass_100
          CloudFrontDistributionSslCertificate:
            Type: AWS::CloudFront::Distribution
            Condition: SslCertificate
            Properties:
              DistributionConfig:
                Aliases:
                - !If [ WPDomainName, !Join [ '', [ '*.', !Ref WPDomainName ] ], !Ref 'AWS::NoValue' ]



    ########################################################################
    ############# this was throwing me. docs make it seems like CacheBehavior: is a sub node under CacheBehaviors`enter code here`
                CacheBehaviors:
                - PathPattern: wp-includes/*
                  AllowedMethods:
                  - DELETE
                  - GET
                  - HEAD
                  - OPTIONS
                  - PATCH
                  - POST
                  - PUT
                  DefaultTTL: 900
                  MaxTTL: 900
                  MinTTL: 900
                  ForwardedValues:
                    QueryString: true
                    Headers:
                    - Host
                  TargetOriginId: elb
                  ViewerProtocolPolicy: redirect-to-https
                  Compress: true
                - PathPattern: wp-content/*
                  AllowedMethods:
                  - DELETE
                  - GET
                  - HEAD
                  - OPTIONS
                  - PATCH
                  - POST
                  - PUT
                  DefaultTTL: 900
                  MaxTTL: 900
                  MinTTL: 900
                  ForwardedValues:
                    QueryString: true
                    Headers:
                    - Host
                  TargetOriginId: elb
                  ViewerProtocolPolicy: redirect-to-https
                  Compress: true
                Comment: !Ref 'AWS::StackName'
########################################################################       

                DefaultCacheBehavior:
                  AllowedMethods:
                  - DELETE
                  - GET
                  - HEAD
                  - OPTIONS
                  - PATCH
                  - POST
                  - PUT
                  DefaultTTL: 0
                  MaxTTL: 0
                  MinTTL: 0
                  ForwardedValues:
                    QueryString: true
                    Headers:
                    - '*'
                    Cookies:
                      Forward: all
                  TargetOriginId: elb
                  ViewerProtocolPolicy: redirect-to-https
                  Compress: true
                Enabled: true
                Origins:
                - DomainName: !Ref PublicAlbDnsName
                  Id: elb
                  CustomOriginConfig:
                    OriginProtocolPolicy: https-only
                PriceClass: PriceClass_100
                ViewerCertificate:
                  AcmCertificateArn: !Ref CloudFrontAcmCertificate
                  SslSupportMethod: sni-only
                  MinimumProtocolVersion: TLSv1

        Outputs:

          DnsEndpoint:
            Value: !If [ NoSslCertificate, !GetAtt CloudFrontDistributionNoSslCertificate.DomainName, !GetAtt CloudFrontDistributionSslCertificate.DomainName ]
          DnsHostname:
            Value: !If [ NoSslCertificate, !Join [ '', [ 'http://', !GetAtt CloudFrontDistributionNoSslCertificate.DomainName ] ], !Join [ '', [ 'https://', !GetAtt CloudFrontDistributionSslCertificate.DomainName ] ] ]

score 1 · Accepted Answer · answered Jan 15 '20 at 19:49

1

There's an example of multiple CacheBehaviors here.

I think your problem is formulation of an array of objects in YAML. See the following question:

YAML equivalent of array of objects in JSON

answered Jan 15 '20 at 19:49

lexicore

42,748
17
132
221

Is there an example cloudformation template with multiple CacheBehaviors defined?

2 Answers2