This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.
AWS::CloudFront::ResponseHeadersPolicy StrictTransportSecurity
Determines whether CloudFront includes the Strict-Transport-Security HTTP
response header and the header's value.
For more information about the Strict-Transport-Security HTTP response
header, see Strict-Transport-Security
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "AccessControlMaxAgeSec" :Integer, "IncludeSubdomains" :Boolean, "Override" :Boolean, "Preload" :Boolean}
YAML
AccessControlMaxAgeSec:IntegerIncludeSubdomains:BooleanOverride:BooleanPreload:Boolean
Properties
AccessControlMaxAgeSec-
A number that CloudFront uses as the value for the
max-agedirective in theStrict-Transport-SecurityHTTP response header.Required: Yes
Type: Integer
Update requires: No interruption
IncludeSubdomains-
A Boolean that determines whether CloudFront includes the
includeSubDomainsdirective in theStrict-Transport-SecurityHTTP response header.Required: No
Type: Boolean
Update requires: No interruption
Override-
A Boolean that determines whether CloudFront overrides the
Strict-Transport-SecurityHTTP response header received from the origin with the one specified in this response headers policy.Required: Yes
Type: Boolean
Update requires: No interruption
Preload-
A Boolean that determines whether CloudFront includes the
preloaddirective in theStrict-Transport-SecurityHTTP response header.Required: No
Type: Boolean
Update requires: No interruption