# ResponseHeadersPolicyStrictTransportSecurity


Determines whether CloudFront includes the `Strict-Transport-Security` HTTP response header and the header's value.

For more information about the `Strict-Transport-Security` HTTP response header, see [Strict-Transport-Security](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security) in the MDN Web Docs.

## Contents


 ** AccessControlMaxAgeSec **   <a name="cloudfront-Type-ResponseHeadersPolicyStrictTransportSecurity-AccessControlMaxAgeSec"></a>
A number that CloudFront uses as the value for the `max-age` directive in the `Strict-Transport-Security` HTTP response header.  
Type: Integer  
Required: Yes

 ** Override **   <a name="cloudfront-Type-ResponseHeadersPolicyStrictTransportSecurity-Override"></a>
A Boolean that determines whether CloudFront overrides the `Strict-Transport-Security` HTTP response header received from the origin with the one specified in this response headers policy.  
Type: Boolean  
Required: Yes

 ** IncludeSubdomains **   <a name="cloudfront-Type-ResponseHeadersPolicyStrictTransportSecurity-IncludeSubdomains"></a>
A Boolean that determines whether CloudFront includes the `includeSubDomains` directive in the `Strict-Transport-Security` HTTP response header.  
Type: Boolean  
Required: No

 ** Preload **   <a name="cloudfront-Type-ResponseHeadersPolicyStrictTransportSecurity-Preload"></a>
A Boolean that determines whether CloudFront includes the `preload` directive in the `Strict-Transport-Security` HTTP response header.  
Type: Boolean  
Required: No

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/cloudfront-2020-05-31/ResponseHeadersPolicyStrictTransportSecurity) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/cloudfront-2020-05-31/ResponseHeadersPolicyStrictTransportSecurity) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/cloudfront-2020-05-31/ResponseHeadersPolicyStrictTransportSecurity)