---
title: "Amazon CloudFront - Air Market"
description: "You want your content served closer to the people asking for it, without leaving the source wide open. This walks through setting up delivery, choosing how you pay, attaching a custom domain with cer…"
canonical: "https://airmarket.ai/app/cloudfront"
---

[Air Market](/) / [IT & Ops](/category/ops) / Amazon CloudFront

Skill by [Amazon Web Services](/@aws)

# Amazon CloudFront

Put content in front of the world and keep the origin locked

## What this does

You want your content served closer to the people asking for it, without leaving the source wide open. This walks through setting up delivery, choosing how you pay, attaching a custom domain with certificates, shutting off direct access to the origin, limiting who can view what, and reading the traffic logs. DNS-only work and failover between distributions belong to other skills.

### Top 3 things it does for you

- Stand up a distribution and decide on caching
- Choose between flat rate and pay-as-you-go pricing
- Lock down an origin so only CloudFront reaches it

## Information

**Amazon CloudFront at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Amazon Web Services](/@aws) |
| Category | [IT & Ops](/category/ops) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Version | 1 |
| Size | 86 KB |
| Licence | Apache-2.0 |
| Repository | [aws/agent-toolkit-for-aws](https://github.com/aws/agent-toolkit-for-aws/tree/74e317a6ee4221204c917770e3aaec9558a81778/skills/specialized-skills/networking-and-content-delivery-skills/cloudfront) |
| GitHub stars | 2,420 (as of Nov 2026) |
| Installs | 5,685, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Amazon CloudFront and flagged nothing. AIR's verdict: **safe**.

**What Amazon CloudFront's check was run against**

|  |  |
| --- | --- |
| Commit | 74e317a6ee4221204c917770e3aaec9558a81778 |
| Content hash | 52976e514f4d48e934a37c5f59a1c9e194b7d67d87cf13a92912e374287b55b8 |
| Files read | [Browse the files at this exact commit](https://github.com/aws/agent-toolkit-for-aws/blob/74e317a6ee4221204c917770e3aaec9558a81778/skills/specialized-skills/networking-and-content-delivery-skills/cloudfront/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Amazon CloudFront](/security/cloudfront)

## About Amazon CloudFront

Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it sits alongside AWS WAF, Shield, CloudFront Functions, Lambda@Edge, Route 53 and your origins, including creating a distribution, caching, and Flat Rate Pricing versus pay-as-you-go; managing custom-domain TLS certificates with ACM in us-east-1; configuring multi-tenant distributions; protecting origins with origin access control, VPC origins and origin mutual TLS; securing content with signed URLs and cookies, geographic restrictions, viewer mutual TLS and edge token validation; and observing traffic through standard and real-time logs.

It applies when you want to put CloudFront in front of content, choose a pricing model, lock an origin, restrict who can view content, or analyze logs.

It is not for the Route 53 DNS side of a CloudFront custom domain or failover between distributions, which the route53-cloudfront skill covers, nor for pure Route 53 DNS work, which the route53 skill covers.

## What's inside

- SKILL.md - instructions
- references/cloudfront-observability.md - reference
- references/managing-certificates-with-cloudfront.md - reference
- references/multi-tenant-distributions.md - reference
- references/protecting-your-origins.md - reference
- references/securing-your-content.md - reference
- references/when-to-use-cloudfront.md - reference

## Questions

### Is Amazon CloudFront safe to install?

AIR scanned this exact version of Amazon CloudFront and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 74e317a6ee42, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/cloudfront.

### How do I install Amazon CloudFront?

Open https://airmarket.ai/app/cloudfront on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/aws/agent-toolkit-for-aws/tree/74e317a6ee4221204c917770e3aaec9558a81778/skills/specialized-skills/networking-and-content-delivery-skills/cloudfront. Install from that link, not the branch.

## Related on Air Market

- [More IT & Ops listings](/category/ops)
- [Everything by Amazon Web Services](/@aws)

---

Canonical URL: <https://airmarket.ai/app/cloudfront>
