1. Packages
  2. AWS
  3. API Docs
  4. cloudfront
  5. MultitenantDistribution
AWS v7.16.0 published on Friday, Jan 9, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.cloudfront.MultitenantDistribution

aws logo
AWS v7.16.0 published on Friday, Jan 9, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Creates an Amazon CloudFront multi-tenant distribution.

    Multi-tenant distributions are a specialized type of CloudFront distribution designed for multi-tenant applications. They have specific limitations and requirements compared to standard CloudFront distributions.

    For information about CloudFront multi-tenant distributions, see the Amazon CloudFront Developer Guide.

    NOTE: CloudFront distributions take about 15 minutes to reach a deployed state after creation or modification. During this time, deletes to resources will be blocked. If you need to delete a distribution that is enabled and you do not want to wait, you need to use the retain_on_delete flag.

    Multi-tenant Distribution Limitations

    Multi-tenant distributions have the following limitations compared to standard CloudFront distributions:

    • Connection Mode: Automatically set to tenant-only and cannot be modified
    • Cache Policies: Must use cache policies instead of legacy TTL settings
    • Trusted Key Groups: Must use trusted key groups instead of trusted signers
    • WAF Integration: Only supports WAF v2 web ACLs
    • Certificate Management: Must use ACM certificates (IAM certificates not supported)

    Unsupported Attributes

    The following attributes that are available in standard CloudFront distributions are not supported for multi-tenant distributions:

    • active_trusted_signers - Use active_trusted_key_groups instead
    • alias_icp_recordals - Managed by connection groups
    • aliases - Managed by connection groups
    • anycast_ip_list_id - Use connection groups instead
    • continuous_deployment_policy_id
    • forwarded_values in cache behaviors - Deprecated, use cache policies instead
    • is_ipv6_enabled - Managed by connection groups
    • price_class - Managed by connection groups
    • smooth_streaming in cache behaviors
    • staging mode
    • trusted_signers in cache behaviors - Use trusted_key_groups instead
    • Cache behavior TTL settings (default_ttl, max_ttl, min_ttl) - Use cache policies instead

    Create MultitenantDistribution Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new MultitenantDistribution(name: string, args: MultitenantDistributionArgs, opts?: CustomResourceOptions);
    @overload
def MultitenantDistribution(resource_name: str,
                            args: MultitenantDistributionArgs,
                            opts: Optional[ResourceOptions] = None)

@overload
def MultitenantDistribution(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            comment: Optional[str] = None,
                            enabled: Optional[bool] = None,
                            origin_groups: Optional[Sequence[MultitenantDistributionOriginGroupArgs]] = None,
                            origins: Optional[Sequence[MultitenantDistributionOriginArgs]] = None,
                            default_cache_behavior: Optional[MultitenantDistributionDefaultCacheBehaviorArgs] = None,
                            default_root_object: Optional[str] = None,
                            cache_behaviors: Optional[Sequence[MultitenantDistributionCacheBehaviorArgs]] = None,
                            http_version: Optional[str] = None,
                            active_trusted_key_groups: Optional[Sequence[MultitenantDistributionActiveTrustedKeyGroupArgs]] = None,
                            custom_error_responses: Optional[Sequence[MultitenantDistributionCustomErrorResponseArgs]] = None,
                            restrictions: Optional[MultitenantDistributionRestrictionsArgs] = None,
                            tags: Optional[Mapping[str, str]] = None,
                            tenant_config: Optional[MultitenantDistributionTenantConfigArgs] = None,
                            timeouts: Optional[MultitenantDistributionTimeoutsArgs] = None,
                            viewer_certificate: Optional[MultitenantDistributionViewerCertificateArgs] = None,
                            web_acl_id: Optional[str] = None)
    func NewMultitenantDistribution(ctx *Context, name string, args MultitenantDistributionArgs, opts ...ResourceOption) (*MultitenantDistribution, error)
    public MultitenantDistribution(string name, MultitenantDistributionArgs args, CustomResourceOptions? opts = null)
    public MultitenantDistribution(String name, MultitenantDistributionArgs args)
public MultitenantDistribution(String name, MultitenantDistributionArgs args, CustomResourceOptions options)

    type: aws:cloudfront:MultitenantDistribution
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args MultitenantDistributionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MultitenantDistributionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MultitenantDistributionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MultitenantDistributionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MultitenantDistributionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var multitenantDistributionResource = new Aws.CloudFront.MultitenantDistribution("multitenantDistributionResource", new()
{
    Comment = "string",
    Enabled = false,
    OriginGroups = new[]
    {
        new Aws.CloudFront.Inputs.MultitenantDistributionOriginGroupArgs
        {
            OriginId = "string",
            FailoverCriteria = new Aws.CloudFront.Inputs.MultitenantDistributionOriginGroupFailoverCriteriaArgs
            {
                StatusCodes = new[]
                {
                    0,
                },
            },
            Members = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionOriginGroupMemberArgs
                {
                    OriginId = "string",
                },
            },
        },
    },
    Origins = new[]
    {
        new Aws.CloudFront.Inputs.MultitenantDistributionOriginArgs
        {
            DomainName = "string",
            Id = "string",
            ConnectionAttempts = 0,
            ConnectionTimeout = 0,
            CustomHeaders = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionOriginCustomHeaderArgs
                {
                    HeaderName = "string",
                    HeaderValue = "string",
                },
            },
            CustomOriginConfigs = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionOriginCustomOriginConfigArgs
                {
                    HttpPort = 0,
                    HttpsPort = 0,
                    OriginProtocolPolicy = "string",
                    OriginSslProtocols = new[]
                    {
                        "string",
                    },
                    IpAddressType = "string",
                    OriginKeepaliveTimeout = 0,
                    OriginReadTimeout = 0,
                },
            },
            OriginAccessControlId = "string",
            OriginPath = "string",
            OriginShields = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionOriginOriginShieldArgs
                {
                    Enabled = false,
                    OriginShieldRegion = "string",
                },
            },
            ResponseCompletionTimeout = 0,
            VpcOriginConfigs = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionOriginVpcOriginConfigArgs
                {
                    VpcOriginId = "string",
                    OriginKeepaliveTimeout = 0,
                    OriginReadTimeout = 0,
                },
            },
        },
    },
    DefaultCacheBehavior = new Aws.CloudFront.Inputs.MultitenantDistributionDefaultCacheBehaviorArgs
    {
        TargetOriginId = "string",
        ViewerProtocolPolicy = "string",
        AllowedMethods = new Aws.CloudFront.Inputs.MultitenantDistributionDefaultCacheBehaviorAllowedMethodsArgs
        {
            CachedMethods = new[]
            {
                "string",
            },
            Items = new[]
            {
                "string",
            },
        },
        CachePolicyId = "string",
        Compress = false,
        FieldLevelEncryptionId = "string",
        FunctionAssociations = new[]
        {
            new Aws.CloudFront.Inputs.MultitenantDistributionDefaultCacheBehaviorFunctionAssociationArgs
            {
                EventType = "string",
                FunctionArn = "string",
            },
        },
        LambdaFunctionAssociations = new[]
        {
            new Aws.CloudFront.Inputs.MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociationArgs
            {
                EventType = "string",
                LambdaFunctionArn = "string",
                IncludeBody = false,
            },
        },
        OriginRequestPolicyId = "string",
        RealtimeLogConfigArn = "string",
        ResponseHeadersPolicyId = "string",
        TrustedKeyGroups = new Aws.CloudFront.Inputs.MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroupsArgs
        {
            Enabled = false,
            Items = new[]
            {
                "string",
            },
        },
    },
    DefaultRootObject = "string",
    CacheBehaviors = new[]
    {
        new Aws.CloudFront.Inputs.MultitenantDistributionCacheBehaviorArgs
        {
            PathPattern = "string",
            ViewerProtocolPolicy = "string",
            TargetOriginId = "string",
            OriginRequestPolicyId = "string",
            FunctionAssociations = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionCacheBehaviorFunctionAssociationArgs
                {
                    EventType = "string",
                    FunctionArn = "string",
                },
            },
            LambdaFunctionAssociations = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionCacheBehaviorLambdaFunctionAssociationArgs
                {
                    EventType = "string",
                    LambdaFunctionArn = "string",
                    IncludeBody = false,
                },
            },
            AllowedMethods = new Aws.CloudFront.Inputs.MultitenantDistributionCacheBehaviorAllowedMethodsArgs
            {
                CachedMethods = new[]
                {
                    "string",
                },
                Items = new[]
                {
                    "string",
                },
            },
            FieldLevelEncryptionId = "string",
            RealtimeLogConfigArn = "string",
            ResponseHeadersPolicyId = "string",
            Compress = false,
            TrustedKeyGroups = new Aws.CloudFront.Inputs.MultitenantDistributionCacheBehaviorTrustedKeyGroupsArgs
            {
                Enabled = false,
                Items = new[]
                {
                    "string",
                },
            },
            CachePolicyId = "string",
        },
    },
    HttpVersion = "string",
    ActiveTrustedKeyGroups = new[]
    {
        new Aws.CloudFront.Inputs.MultitenantDistributionActiveTrustedKeyGroupArgs
        {
            Enabled = false,
            Items = new[]
            {
                new Aws.CloudFront.Inputs.MultitenantDistributionActiveTrustedKeyGroupItemArgs
                {
                    KeyGroupId = "string",
                    KeyPairIds = new[]
                    {
                        "string",
                    },
                },
            },
        },
    },
    CustomErrorResponses = new[]
    {
        new Aws.CloudFront.Inputs.MultitenantDistributionCustomErrorResponseArgs
        {
            ErrorCode = 0,
            ErrorCachingMinTtl = 0,
            ResponseCode = "string",
            ResponsePagePath = "string",
        },
    },
    Restrictions = new Aws.CloudFront.Inputs.MultitenantDistributionRestrictionsArgs
    {
        GeoRestriction = new Aws.CloudFront.Inputs.MultitenantDistributionRestrictionsGeoRestrictionArgs
        {
            RestrictionType = "string",
            Items = new[]
            {
                "string",
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
    TenantConfig = new Aws.CloudFront.Inputs.MultitenantDistributionTenantConfigArgs
    {
        ParameterDefinitions = new[]
        {
            new Aws.CloudFront.Inputs.MultitenantDistributionTenantConfigParameterDefinitionArgs
            {
                Name = "string",
                Definitions = new[]
                {
                    new Aws.CloudFront.Inputs.MultitenantDistributionTenantConfigParameterDefinitionDefinitionArgs
                    {
                        StringSchemas = new[]
                        {
                            new Aws.CloudFront.Inputs.MultitenantDistributionTenantConfigParameterDefinitionDefinitionStringSchemaArgs
                            {
                                Required = false,
                                Comment = "string",
                                DefaultValue = "string",
                            },
                        },
                    },
                },
            },
        },
    },
    Timeouts = new Aws.CloudFront.Inputs.MultitenantDistributionTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
    ViewerCertificate = new Aws.CloudFront.Inputs.MultitenantDistributionViewerCertificateArgs
    {
        AcmCertificateArn = "string",
        CloudfrontDefaultCertificate = false,
        MinimumProtocolVersion = "string",
        SslSupportMethod = "string",
    },
    WebAclId = "string",
});

    example, err := cloudfront.NewMultitenantDistribution(ctx, "multitenantDistributionResource", &cloudfront.MultitenantDistributionArgs{
	Comment: pulumi.String("string"),
	Enabled: pulumi.Bool(false),
	OriginGroups: cloudfront.MultitenantDistributionOriginGroupArray{
		&cloudfront.MultitenantDistributionOriginGroupArgs{
			OriginId: pulumi.String("string"),
			FailoverCriteria: &cloudfront.MultitenantDistributionOriginGroupFailoverCriteriaArgs{
				StatusCodes: pulumi.IntArray{
					pulumi.Int(0),
				},
			},
			Members: cloudfront.MultitenantDistributionOriginGroupMemberArray{
				&cloudfront.MultitenantDistributionOriginGroupMemberArgs{
					OriginId: pulumi.String("string"),
				},
			},
		},
	},
	Origins: cloudfront.MultitenantDistributionOriginArray{
		&cloudfront.MultitenantDistributionOriginArgs{
			DomainName:         pulumi.String("string"),
			Id:                 pulumi.String("string"),
			ConnectionAttempts: pulumi.Int(0),
			ConnectionTimeout:  pulumi.Int(0),
			CustomHeaders: cloudfront.MultitenantDistributionOriginCustomHeaderArray{
				&cloudfront.MultitenantDistributionOriginCustomHeaderArgs{
					HeaderName:  pulumi.String("string"),
					HeaderValue: pulumi.String("string"),
				},
			},
			CustomOriginConfigs: cloudfront.MultitenantDistributionOriginCustomOriginConfigArray{
				&cloudfront.MultitenantDistributionOriginCustomOriginConfigArgs{
					HttpPort:             pulumi.Int(0),
					HttpsPort:            pulumi.Int(0),
					OriginProtocolPolicy: pulumi.String("string"),
					OriginSslProtocols: pulumi.StringArray{
						pulumi.String("string"),
					},
					IpAddressType:          pulumi.String("string"),
					OriginKeepaliveTimeout: pulumi.Int(0),
					OriginReadTimeout:      pulumi.Int(0),
				},
			},
			OriginAccessControlId: pulumi.String("string"),
			OriginPath:            pulumi.String("string"),
			OriginShields: cloudfront.MultitenantDistributionOriginOriginShieldArray{
				&cloudfront.MultitenantDistributionOriginOriginShieldArgs{
					Enabled:            pulumi.Bool(false),
					OriginShieldRegion: pulumi.String("string"),
				},
			},
			ResponseCompletionTimeout: pulumi.Int(0),
			VpcOriginConfigs: cloudfront.MultitenantDistributionOriginVpcOriginConfigArray{
				&cloudfront.MultitenantDistributionOriginVpcOriginConfigArgs{
					VpcOriginId:            pulumi.String("string"),
					OriginKeepaliveTimeout: pulumi.Int(0),
					OriginReadTimeout:      pulumi.Int(0),
				},
			},
		},
	},
	DefaultCacheBehavior: &cloudfront.MultitenantDistributionDefaultCacheBehaviorArgs{
		TargetOriginId:       pulumi.String("string"),
		ViewerProtocolPolicy: pulumi.String("string"),
		AllowedMethods: &cloudfront.MultitenantDistributionDefaultCacheBehaviorAllowedMethodsArgs{
			CachedMethods: pulumi.StringArray{
				pulumi.String("string"),
			},
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		CachePolicyId:          pulumi.String("string"),
		Compress:               pulumi.Bool(false),
		FieldLevelEncryptionId: pulumi.String("string"),
		FunctionAssociations: cloudfront.MultitenantDistributionDefaultCacheBehaviorFunctionAssociationArray{
			&cloudfront.MultitenantDistributionDefaultCacheBehaviorFunctionAssociationArgs{
				EventType:   pulumi.String("string"),
				FunctionArn: pulumi.String("string"),
			},
		},
		LambdaFunctionAssociations: cloudfront.MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociationArray{
			&cloudfront.MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociationArgs{
				EventType:         pulumi.String("string"),
				LambdaFunctionArn: pulumi.String("string"),
				IncludeBody:       pulumi.Bool(false),
			},
		},
		OriginRequestPolicyId:   pulumi.String("string"),
		RealtimeLogConfigArn:    pulumi.String("string"),
		ResponseHeadersPolicyId: pulumi.String("string"),
		TrustedKeyGroups: &cloudfront.MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroupsArgs{
			Enabled: pulumi.Bool(false),
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	DefaultRootObject: pulumi.String("string"),
	CacheBehaviors: cloudfront.MultitenantDistributionCacheBehaviorArray{
		&cloudfront.MultitenantDistributionCacheBehaviorArgs{
			PathPattern:           pulumi.String("string"),
			ViewerProtocolPolicy:  pulumi.String("string"),
			TargetOriginId:        pulumi.String("string"),
			OriginRequestPolicyId: pulumi.String("string"),
			FunctionAssociations: cloudfront.MultitenantDistributionCacheBehaviorFunctionAssociationArray{
				&cloudfront.MultitenantDistributionCacheBehaviorFunctionAssociationArgs{
					EventType:   pulumi.String("string"),
					FunctionArn: pulumi.String("string"),
				},
			},
			LambdaFunctionAssociations: cloudfront.MultitenantDistributionCacheBehaviorLambdaFunctionAssociationArray{
				&cloudfront.MultitenantDistributionCacheBehaviorLambdaFunctionAssociationArgs{
					EventType:         pulumi.String("string"),
					LambdaFunctionArn: pulumi.String("string"),
					IncludeBody:       pulumi.Bool(false),
				},
			},
			AllowedMethods: &cloudfront.MultitenantDistributionCacheBehaviorAllowedMethodsArgs{
				CachedMethods: pulumi.StringArray{
					pulumi.String("string"),
				},
				Items: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
			FieldLevelEncryptionId:  pulumi.String("string"),
			RealtimeLogConfigArn:    pulumi.String("string"),
			ResponseHeadersPolicyId: pulumi.String("string"),
			Compress:                pulumi.Bool(false),
			TrustedKeyGroups: &cloudfront.MultitenantDistributionCacheBehaviorTrustedKeyGroupsArgs{
				Enabled: pulumi.Bool(false),
				Items: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
			CachePolicyId: pulumi.String("string"),
		},
	},
	HttpVersion: pulumi.String("string"),
	ActiveTrustedKeyGroups: cloudfront.MultitenantDistributionActiveTrustedKeyGroupArray{
		&cloudfront.MultitenantDistributionActiveTrustedKeyGroupArgs{
			Enabled: pulumi.Bool(false),
			Items: cloudfront.MultitenantDistributionActiveTrustedKeyGroupItemArray{
				&cloudfront.MultitenantDistributionActiveTrustedKeyGroupItemArgs{
					KeyGroupId: pulumi.String("string"),
					KeyPairIds: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
		},
	},
	CustomErrorResponses: cloudfront.MultitenantDistributionCustomErrorResponseArray{
		&cloudfront.MultitenantDistributionCustomErrorResponseArgs{
			ErrorCode:          pulumi.Int(0),
			ErrorCachingMinTtl: pulumi.Int(0),
			ResponseCode:       pulumi.String("string"),
			ResponsePagePath:   pulumi.String("string"),
		},
	},
	Restrictions: &cloudfront.MultitenantDistributionRestrictionsArgs{
		GeoRestriction: &cloudfront.MultitenantDistributionRestrictionsGeoRestrictionArgs{
			RestrictionType: pulumi.String("string"),
			Items: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TenantConfig: &cloudfront.MultitenantDistributionTenantConfigArgs{
		ParameterDefinitions: cloudfront.MultitenantDistributionTenantConfigParameterDefinitionArray{
			&cloudfront.MultitenantDistributionTenantConfigParameterDefinitionArgs{
				Name: pulumi.String("string"),
				Definitions: cloudfront.MultitenantDistributionTenantConfigParameterDefinitionDefinitionArray{
					&cloudfront.MultitenantDistributionTenantConfigParameterDefinitionDefinitionArgs{
						StringSchemas: cloudfront.MultitenantDistributionTenantConfigParameterDefinitionDefinitionStringSchemaArray{
							&cloudfront.MultitenantDistributionTenantConfigParameterDefinitionDefinitionStringSchemaArgs{
								Required:     pulumi.Bool(false),
								Comment:      pulumi.String("string"),
								DefaultValue: pulumi.String("string"),
							},
						},
					},
				},
			},
		},
	},
	Timeouts: &cloudfront.MultitenantDistributionTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
	ViewerCertificate: &cloudfront.MultitenantDistributionViewerCertificateArgs{
		AcmCertificateArn:            pulumi.String("string"),
		CloudfrontDefaultCertificate: pulumi.Bool(false),
		MinimumProtocolVersion:       pulumi.String("string"),
		SslSupportMethod:             pulumi.String("string"),
	},
	WebAclId: pulumi.String("string"),
})

    var multitenantDistributionResource = new MultitenantDistribution("multitenantDistributionResource", MultitenantDistributionArgs.builder()
    .comment("string")
    .enabled(false)
    .originGroups(MultitenantDistributionOriginGroupArgs.builder()
        .originId("string")
        .failoverCriteria(MultitenantDistributionOriginGroupFailoverCriteriaArgs.builder()
            .statusCodes(0)
            .build())
        .members(MultitenantDistributionOriginGroupMemberArgs.builder()
            .originId("string")
            .build())
        .build())
    .origins(MultitenantDistributionOriginArgs.builder()
        .domainName("string")
        .id("string")
        .connectionAttempts(0)
        .connectionTimeout(0)
        .customHeaders(MultitenantDistributionOriginCustomHeaderArgs.builder()
            .headerName("string")
            .headerValue("string")
            .build())
        .customOriginConfigs(MultitenantDistributionOriginCustomOriginConfigArgs.builder()
            .httpPort(0)
            .httpsPort(0)
            .originProtocolPolicy("string")
            .originSslProtocols("string")
            .ipAddressType("string")
            .originKeepaliveTimeout(0)
            .originReadTimeout(0)
            .build())
        .originAccessControlId("string")
        .originPath("string")
        .originShields(MultitenantDistributionOriginOriginShieldArgs.builder()
            .enabled(false)
            .originShieldRegion("string")
            .build())
        .responseCompletionTimeout(0)
        .vpcOriginConfigs(MultitenantDistributionOriginVpcOriginConfigArgs.builder()
            .vpcOriginId("string")
            .originKeepaliveTimeout(0)
            .originReadTimeout(0)
            .build())
        .build())
    .defaultCacheBehavior(MultitenantDistributionDefaultCacheBehaviorArgs.builder()
        .targetOriginId("string")
        .viewerProtocolPolicy("string")
        .allowedMethods(MultitenantDistributionDefaultCacheBehaviorAllowedMethodsArgs.builder()
            .cachedMethods("string")
            .items("string")
            .build())
        .cachePolicyId("string")
        .compress(false)
        .fieldLevelEncryptionId("string")
        .functionAssociations(MultitenantDistributionDefaultCacheBehaviorFunctionAssociationArgs.builder()
            .eventType("string")
            .functionArn("string")
            .build())
        .lambdaFunctionAssociations(MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociationArgs.builder()
            .eventType("string")
            .lambdaFunctionArn("string")
            .includeBody(false)
            .build())
        .originRequestPolicyId("string")
        .realtimeLogConfigArn("string")
        .responseHeadersPolicyId("string")
        .trustedKeyGroups(MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroupsArgs.builder()
            .enabled(false)
            .items("string")
            .build())
        .build())
    .defaultRootObject("string")
    .cacheBehaviors(MultitenantDistributionCacheBehaviorArgs.builder()
        .pathPattern("string")
        .viewerProtocolPolicy("string")
        .targetOriginId("string")
        .originRequestPolicyId("string")
        .functionAssociations(MultitenantDistributionCacheBehaviorFunctionAssociationArgs.builder()
            .eventType("string")
            .functionArn("string")
            .build())
        .lambdaFunctionAssociations(MultitenantDistributionCacheBehaviorLambdaFunctionAssociationArgs.builder()
            .eventType("string")
            .lambdaFunctionArn("string")
            .includeBody(false)
            .build())
        .allowedMethods(MultitenantDistributionCacheBehaviorAllowedMethodsArgs.builder()
            .cachedMethods("string")
            .items("string")
            .build())
        .fieldLevelEncryptionId("string")
        .realtimeLogConfigArn("string")
        .responseHeadersPolicyId("string")
        .compress(false)
        .trustedKeyGroups(MultitenantDistributionCacheBehaviorTrustedKeyGroupsArgs.builder()
            .enabled(false)
            .items("string")
            .build())
        .cachePolicyId("string")
        .build())
    .httpVersion("string")
    .activeTrustedKeyGroups(MultitenantDistributionActiveTrustedKeyGroupArgs.builder()
        .enabled(false)
        .items(MultitenantDistributionActiveTrustedKeyGroupItemArgs.builder()
            .keyGroupId("string")
            .keyPairIds("string")
            .build())
        .build())
    .customErrorResponses(MultitenantDistributionCustomErrorResponseArgs.builder()
        .errorCode(0)
        .errorCachingMinTtl(0)
        .responseCode("string")
        .responsePagePath("string")
        .build())
    .restrictions(MultitenantDistributionRestrictionsArgs.builder()
        .geoRestriction(MultitenantDistributionRestrictionsGeoRestrictionArgs.builder()
            .restrictionType("string")
            .items("string")
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .tenantConfig(MultitenantDistributionTenantConfigArgs.builder()
        .parameterDefinitions(MultitenantDistributionTenantConfigParameterDefinitionArgs.builder()
            .name("string")
            .definitions(MultitenantDistributionTenantConfigParameterDefinitionDefinitionArgs.builder()
                .stringSchemas(MultitenantDistributionTenantConfigParameterDefinitionDefinitionStringSchemaArgs.builder()
                    .required(false)
                    .comment("string")
                    .defaultValue("string")
                    .build())
                .build())
            .build())
        .build())
    .timeouts(MultitenantDistributionTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .viewerCertificate(MultitenantDistributionViewerCertificateArgs.builder()
        .acmCertificateArn("string")
        .cloudfrontDefaultCertificate(false)
        .minimumProtocolVersion("string")
        .sslSupportMethod("string")
        .build())
    .webAclId("string")
    .build());

    multitenant_distribution_resource = aws.cloudfront.MultitenantDistribution("multitenantDistributionResource",
    comment="string",
    enabled=False,
    origin_groups=[{
        "origin_id": "string",
        "failover_criteria": {
            "status_codes": [0],
        },
        "members": [{
            "origin_id": "string",
        }],
    }],
    origins=[{
        "domain_name": "string",
        "id": "string",
        "connection_attempts": 0,
        "connection_timeout": 0,
        "custom_headers": [{
            "header_name": "string",
            "header_value": "string",
        }],
        "custom_origin_configs": [{
            "http_port": 0,
            "https_port": 0,
            "origin_protocol_policy": "string",
            "origin_ssl_protocols": ["string"],
            "ip_address_type": "string",
            "origin_keepalive_timeout": 0,
            "origin_read_timeout": 0,
        }],
        "origin_access_control_id": "string",
        "origin_path": "string",
        "origin_shields": [{
            "enabled": False,
            "origin_shield_region": "string",
        }],
        "response_completion_timeout": 0,
        "vpc_origin_configs": [{
            "vpc_origin_id": "string",
            "origin_keepalive_timeout": 0,
            "origin_read_timeout": 0,
        }],
    }],
    default_cache_behavior={
        "target_origin_id": "string",
        "viewer_protocol_policy": "string",
        "allowed_methods": {
            "cached_methods": ["string"],
            "items": ["string"],
        },
        "cache_policy_id": "string",
        "compress": False,
        "field_level_encryption_id": "string",
        "function_associations": [{
            "event_type": "string",
            "function_arn": "string",
        }],
        "lambda_function_associations": [{
            "event_type": "string",
            "lambda_function_arn": "string",
            "include_body": False,
        }],
        "origin_request_policy_id": "string",
        "realtime_log_config_arn": "string",
        "response_headers_policy_id": "string",
        "trusted_key_groups": {
            "enabled": False,
            "items": ["string"],
        },
    },
    default_root_object="string",
    cache_behaviors=[{
        "path_pattern": "string",
        "viewer_protocol_policy": "string",
        "target_origin_id": "string",
        "origin_request_policy_id": "string",
        "function_associations": [{
            "event_type": "string",
            "function_arn": "string",
        }],
        "lambda_function_associations": [{
            "event_type": "string",
            "lambda_function_arn": "string",
            "include_body": False,
        }],
        "allowed_methods": {
            "cached_methods": ["string"],
            "items": ["string"],
        },
        "field_level_encryption_id": "string",
        "realtime_log_config_arn": "string",
        "response_headers_policy_id": "string",
        "compress": False,
        "trusted_key_groups": {
            "enabled": False,
            "items": ["string"],
        },
        "cache_policy_id": "string",
    }],
    http_version="string",
    active_trusted_key_groups=[{
        "enabled": False,
        "items": [{
            "key_group_id": "string",
            "key_pair_ids": ["string"],
        }],
    }],
    custom_error_responses=[{
        "error_code": 0,
        "error_caching_min_ttl": 0,
        "response_code": "string",
        "response_page_path": "string",
    }],
    restrictions={
        "geo_restriction": {
            "restriction_type": "string",
            "items": ["string"],
        },
    },
    tags={
        "string": "string",
    },
    tenant_config={
        "parameter_definitions": [{
            "name": "string",
            "definitions": [{
                "string_schemas": [{
                    "required": False,
                    "comment": "string",
                    "default_value": "string",
                }],
            }],
        }],
    },
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    },
    viewer_certificate={
        "acm_certificate_arn": "string",
        "cloudfront_default_certificate": False,
        "minimum_protocol_version": "string",
        "ssl_support_method": "string",
    },
    web_acl_id="string")

    const multitenantDistributionResource = new aws.cloudfront.MultitenantDistribution("multitenantDistributionResource", {
    comment: "string",
    enabled: false,
    originGroups: [{
        originId: "string",
        failoverCriteria: {
            statusCodes: [0],
        },
        members: [{
            originId: "string",
        }],
    }],
    origins: [{
        domainName: "string",
        id: "string",
        connectionAttempts: 0,
        connectionTimeout: 0,
        customHeaders: [{
            headerName: "string",
            headerValue: "string",
        }],
        customOriginConfigs: [{
            httpPort: 0,
            httpsPort: 0,
            originProtocolPolicy: "string",
            originSslProtocols: ["string"],
            ipAddressType: "string",
            originKeepaliveTimeout: 0,
            originReadTimeout: 0,
        }],
        originAccessControlId: "string",
        originPath: "string",
        originShields: [{
            enabled: false,
            originShieldRegion: "string",
        }],
        responseCompletionTimeout: 0,
        vpcOriginConfigs: [{
            vpcOriginId: "string",
            originKeepaliveTimeout: 0,
            originReadTimeout: 0,
        }],
    }],
    defaultCacheBehavior: {
        targetOriginId: "string",
        viewerProtocolPolicy: "string",
        allowedMethods: {
            cachedMethods: ["string"],
            items: ["string"],
        },
        cachePolicyId: "string",
        compress: false,
        fieldLevelEncryptionId: "string",
        functionAssociations: [{
            eventType: "string",
            functionArn: "string",
        }],
        lambdaFunctionAssociations: [{
            eventType: "string",
            lambdaFunctionArn: "string",
            includeBody: false,
        }],
        originRequestPolicyId: "string",
        realtimeLogConfigArn: "string",
        responseHeadersPolicyId: "string",
        trustedKeyGroups: {
            enabled: false,
            items: ["string"],
        },
    },
    defaultRootObject: "string",
    cacheBehaviors: [{
        pathPattern: "string",
        viewerProtocolPolicy: "string",
        targetOriginId: "string",
        originRequestPolicyId: "string",
        functionAssociations: [{
            eventType: "string",
            functionArn: "string",
        }],
        lambdaFunctionAssociations: [{
            eventType: "string",
            lambdaFunctionArn: "string",
            includeBody: false,
        }],
        allowedMethods: {
            cachedMethods: ["string"],
            items: ["string"],
        },
        fieldLevelEncryptionId: "string",
        realtimeLogConfigArn: "string",
        responseHeadersPolicyId: "string",
        compress: false,
        trustedKeyGroups: {
            enabled: false,
            items: ["string"],
        },
        cachePolicyId: "string",
    }],
    httpVersion: "string",
    activeTrustedKeyGroups: [{
        enabled: false,
        items: [{
            keyGroupId: "string",
            keyPairIds: ["string"],
        }],
    }],
    customErrorResponses: [{
        errorCode: 0,
        errorCachingMinTtl: 0,
        responseCode: "string",
        responsePagePath: "string",
    }],
    restrictions: {
        geoRestriction: {
            restrictionType: "string",
            items: ["string"],
        },
    },
    tags: {
        string: "string",
    },
    tenantConfig: {
        parameterDefinitions: [{
            name: "string",
            definitions: [{
                stringSchemas: [{
                    required: false,
                    comment: "string",
                    defaultValue: "string",
                }],
            }],
        }],
    },
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
    viewerCertificate: {
        acmCertificateArn: "string",
        cloudfrontDefaultCertificate: false,
        minimumProtocolVersion: "string",
        sslSupportMethod: "string",
    },
    webAclId: "string",
});

    type: aws:cloudfront:MultitenantDistribution
properties:
    activeTrustedKeyGroups:
        - enabled: false
          items:
            - keyGroupId: string
              keyPairIds:
                - string
    cacheBehaviors:
        - allowedMethods:
            cachedMethods:
                - string
            items:
                - string
          cachePolicyId: string
          compress: false
          fieldLevelEncryptionId: string
          functionAssociations:
            - eventType: string
              functionArn: string
          lambdaFunctionAssociations:
            - eventType: string
              includeBody: false
              lambdaFunctionArn: string
          originRequestPolicyId: string
          pathPattern: string
          realtimeLogConfigArn: string
          responseHeadersPolicyId: string
          targetOriginId: string
          trustedKeyGroups:
            enabled: false
            items:
                - string
          viewerProtocolPolicy: string
    comment: string
    customErrorResponses:
        - errorCachingMinTtl: 0
          errorCode: 0
          responseCode: string
          responsePagePath: string
    defaultCacheBehavior:
        allowedMethods:
            cachedMethods:
                - string
            items:
                - string
        cachePolicyId: string
        compress: false
        fieldLevelEncryptionId: string
        functionAssociations:
            - eventType: string
              functionArn: string
        lambdaFunctionAssociations:
            - eventType: string
              includeBody: false
              lambdaFunctionArn: string
        originRequestPolicyId: string
        realtimeLogConfigArn: string
        responseHeadersPolicyId: string
        targetOriginId: string
        trustedKeyGroups:
            enabled: false
            items:
                - string
        viewerProtocolPolicy: string
    defaultRootObject: string
    enabled: false
    httpVersion: string
    originGroups:
        - failoverCriteria:
            statusCodes:
                - 0
          members:
            - originId: string
          originId: string
    origins:
        - connectionAttempts: 0
          connectionTimeout: 0
          customHeaders:
            - headerName: string
              headerValue: string
          customOriginConfigs:
            - httpPort: 0
              httpsPort: 0
              ipAddressType: string
              originKeepaliveTimeout: 0
              originProtocolPolicy: string
              originReadTimeout: 0
              originSslProtocols:
                - string
          domainName: string
          id: string
          originAccessControlId: string
          originPath: string
          originShields:
            - enabled: false
              originShieldRegion: string
          responseCompletionTimeout: 0
          vpcOriginConfigs:
            - originKeepaliveTimeout: 0
              originReadTimeout: 0
              vpcOriginId: string
    restrictions:
        geoRestriction:
            items:
                - string
            restrictionType: string
    tags:
        string: string
    tenantConfig:
        parameterDefinitions:
            - definitions:
                - stringSchemas:
                    - comment: string
                      defaultValue: string
                      required: false
              name: string
    timeouts:
        create: string
        delete: string
        update: string
    viewerCertificate:
        acmCertificateArn: string
        cloudfrontDefaultCertificate: false
        minimumProtocolVersion: string
        sslSupportMethod: string
    webAclId: string

    MultitenantDistribution Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The MultitenantDistribution resource accepts the following input properties:

    Comment string
    Any comments you want to include about the distribution.
    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    ActiveTrustedKeyGroups List<MultitenantDistributionActiveTrustedKeyGroup>
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    CacheBehaviors List<MultitenantDistributionCacheBehavior>
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    CustomErrorResponses List<MultitenantDistributionCustomErrorResponse>
    One or more custom error response elements. See Custom Error Response below.
    DefaultCacheBehavior MultitenantDistributionDefaultCacheBehavior
    Default cache behavior for this distribution. See Default Cache Behavior below.
    DefaultRootObject string
    Object that you want CloudFront to return when an end user requests the root URL.
    HttpVersion string
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    OriginGroups List<MultitenantDistributionOriginGroup>
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    Origins List<MultitenantDistributionOrigin>
    One or more origins for this distribution (multiples allowed). See Origin below.
    Restrictions MultitenantDistributionRestrictions
    Restriction configuration for this distribution. See Restrictions below.
    Tags Dictionary<string, string>
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TenantConfig MultitenantDistributionTenantConfig
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    Timeouts MultitenantDistributionTimeouts
    ViewerCertificate MultitenantDistributionViewerCertificate
    SSL configuration for this distribution. See Viewer Certificate below.
    WebAclId string
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    Comment string
    Any comments you want to include about the distribution.
    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    ActiveTrustedKeyGroups []MultitenantDistributionActiveTrustedKeyGroupArgs
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    CacheBehaviors []MultitenantDistributionCacheBehaviorArgs
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    CustomErrorResponses []MultitenantDistributionCustomErrorResponseArgs
    One or more custom error response elements. See Custom Error Response below.
    DefaultCacheBehavior MultitenantDistributionDefaultCacheBehaviorArgs
    Default cache behavior for this distribution. See Default Cache Behavior below.
    DefaultRootObject string
    Object that you want CloudFront to return when an end user requests the root URL.
    HttpVersion string
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    OriginGroups []MultitenantDistributionOriginGroupArgs
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    Origins []MultitenantDistributionOriginArgs
    One or more origins for this distribution (multiples allowed). See Origin below.
    Restrictions MultitenantDistributionRestrictionsArgs
    Restriction configuration for this distribution. See Restrictions below.
    Tags map[string]string
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TenantConfig MultitenantDistributionTenantConfigArgs
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    Timeouts MultitenantDistributionTimeoutsArgs
    ViewerCertificate MultitenantDistributionViewerCertificateArgs
    SSL configuration for this distribution. See Viewer Certificate below.
    WebAclId string
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    comment String
    Any comments you want to include about the distribution.
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    activeTrustedKeyGroups List<MultitenantDistributionActiveTrustedKeyGroup>
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    cacheBehaviors List<MultitenantDistributionCacheBehavior>
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    customErrorResponses List<MultitenantDistributionCustomErrorResponse>
    One or more custom error response elements. See Custom Error Response below.
    defaultCacheBehavior MultitenantDistributionDefaultCacheBehavior
    Default cache behavior for this distribution. See Default Cache Behavior below.
    defaultRootObject String
    Object that you want CloudFront to return when an end user requests the root URL.
    httpVersion String
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    originGroups List<MultitenantDistributionOriginGroup>
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins List<MultitenantDistributionOrigin>
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions MultitenantDistributionRestrictions
    Restriction configuration for this distribution. See Restrictions below.
    tags Map<String,String>
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tenantConfig MultitenantDistributionTenantConfig
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts MultitenantDistributionTimeouts
    viewerCertificate MultitenantDistributionViewerCertificate
    SSL configuration for this distribution. See Viewer Certificate below.
    webAclId String
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    comment string
    Any comments you want to include about the distribution.
    enabled boolean
    Whether the distribution is enabled to accept end user requests for content.
    activeTrustedKeyGroups MultitenantDistributionActiveTrustedKeyGroup[]
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    cacheBehaviors MultitenantDistributionCacheBehavior[]
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    customErrorResponses MultitenantDistributionCustomErrorResponse[]
    One or more custom error response elements. See Custom Error Response below.
    defaultCacheBehavior MultitenantDistributionDefaultCacheBehavior
    Default cache behavior for this distribution. See Default Cache Behavior below.
    defaultRootObject string
    Object that you want CloudFront to return when an end user requests the root URL.
    httpVersion string
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    originGroups MultitenantDistributionOriginGroup[]
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins MultitenantDistributionOrigin[]
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions MultitenantDistributionRestrictions
    Restriction configuration for this distribution. See Restrictions below.
    tags {[key: string]: string}
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tenantConfig MultitenantDistributionTenantConfig
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts MultitenantDistributionTimeouts
    viewerCertificate MultitenantDistributionViewerCertificate
    SSL configuration for this distribution. See Viewer Certificate below.
    webAclId string
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    comment str
    Any comments you want to include about the distribution.
    enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    active_trusted_key_groups Sequence[MultitenantDistributionActiveTrustedKeyGroupArgs]
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    cache_behaviors Sequence[MultitenantDistributionCacheBehaviorArgs]
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    custom_error_responses Sequence[MultitenantDistributionCustomErrorResponseArgs]
    One or more custom error response elements. See Custom Error Response below.
    default_cache_behavior MultitenantDistributionDefaultCacheBehaviorArgs
    Default cache behavior for this distribution. See Default Cache Behavior below.
    default_root_object str
    Object that you want CloudFront to return when an end user requests the root URL.
    http_version str
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    origin_groups Sequence[MultitenantDistributionOriginGroupArgs]
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins Sequence[MultitenantDistributionOriginArgs]
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions MultitenantDistributionRestrictionsArgs
    Restriction configuration for this distribution. See Restrictions below.
    tags Mapping[str, str]
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tenant_config MultitenantDistributionTenantConfigArgs
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts MultitenantDistributionTimeoutsArgs
    viewer_certificate MultitenantDistributionViewerCertificateArgs
    SSL configuration for this distribution. See Viewer Certificate below.
    web_acl_id str
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    comment String
    Any comments you want to include about the distribution.
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    activeTrustedKeyGroups List<Property Map>
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    cacheBehaviors List<Property Map>
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    customErrorResponses List<Property Map>
    One or more custom error response elements. See Custom Error Response below.
    defaultCacheBehavior Property Map
    Default cache behavior for this distribution. See Default Cache Behavior below.
    defaultRootObject String
    Object that you want CloudFront to return when an end user requests the root URL.
    httpVersion String
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    originGroups List<Property Map>
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins List<Property Map>
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions Property Map
    Restriction configuration for this distribution. See Restrictions below.
    tags Map<String>
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tenantConfig Property Map
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts Property Map
    viewerCertificate Property Map
    SSL configuration for this distribution. See Viewer Certificate below.
    webAclId String
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the MultitenantDistribution resource produces the following output properties:

    Arn string
    ARN for the distribution.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    ConnectionMode string
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    DomainName string
    Domain name corresponding to the distribution.
    Etag string
    Current version of the distribution's information.
    Id string
    The provider-assigned unique ID for this managed resource.
    InProgressInvalidationBatches int
    Number of invalidation batches currently in progress.
    LastModifiedTime string
    Date and time the distribution was last modified.
    Status string
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    TagsAll Dictionary<string, string>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    Arn string
    ARN for the distribution.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    ConnectionMode string
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    DomainName string
    Domain name corresponding to the distribution.
    Etag string
    Current version of the distribution's information.
    Id string
    The provider-assigned unique ID for this managed resource.
    InProgressInvalidationBatches int
    Number of invalidation batches currently in progress.
    LastModifiedTime string
    Date and time the distribution was last modified.
    Status string
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    TagsAll map[string]string
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn String
    ARN for the distribution.
    callerReference String
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    connectionMode String
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    domainName String
    Domain name corresponding to the distribution.
    etag String
    Current version of the distribution's information.
    id String
    The provider-assigned unique ID for this managed resource.
    inProgressInvalidationBatches Integer
    Number of invalidation batches currently in progress.
    lastModifiedTime String
    Date and time the distribution was last modified.
    status String
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tagsAll Map<String,String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn string
    ARN for the distribution.
    callerReference string
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    connectionMode string
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    domainName string
    Domain name corresponding to the distribution.
    etag string
    Current version of the distribution's information.
    id string
    The provider-assigned unique ID for this managed resource.
    inProgressInvalidationBatches number
    Number of invalidation batches currently in progress.
    lastModifiedTime string
    Date and time the distribution was last modified.
    status string
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tagsAll {[key: string]: string}
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn str
    ARN for the distribution.
    caller_reference str
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    connection_mode str
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    domain_name str
    Domain name corresponding to the distribution.
    etag str
    Current version of the distribution's information.
    id str
    The provider-assigned unique ID for this managed resource.
    in_progress_invalidation_batches int
    Number of invalidation batches currently in progress.
    last_modified_time str
    Date and time the distribution was last modified.
    status str
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tags_all Mapping[str, str]
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn String
    ARN for the distribution.
    callerReference String
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    connectionMode String
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    domainName String
    Domain name corresponding to the distribution.
    etag String
    Current version of the distribution's information.
    id String
    The provider-assigned unique ID for this managed resource.
    inProgressInvalidationBatches Number
    Number of invalidation batches currently in progress.
    lastModifiedTime String
    Date and time the distribution was last modified.
    status String
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tagsAll Map<String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    Look up Existing MultitenantDistribution Resource

    Get an existing MultitenantDistribution resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MultitenantDistributionState, opts?: CustomResourceOptions): MultitenantDistribution
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        active_trusted_key_groups: Optional[Sequence[MultitenantDistributionActiveTrustedKeyGroupArgs]] = None,
        arn: Optional[str] = None,
        cache_behaviors: Optional[Sequence[MultitenantDistributionCacheBehaviorArgs]] = None,
        caller_reference: Optional[str] = None,
        comment: Optional[str] = None,
        connection_mode: Optional[str] = None,
        custom_error_responses: Optional[Sequence[MultitenantDistributionCustomErrorResponseArgs]] = None,
        default_cache_behavior: Optional[MultitenantDistributionDefaultCacheBehaviorArgs] = None,
        default_root_object: Optional[str] = None,
        domain_name: Optional[str] = None,
        enabled: Optional[bool] = None,
        etag: Optional[str] = None,
        http_version: Optional[str] = None,
        in_progress_invalidation_batches: Optional[int] = None,
        last_modified_time: Optional[str] = None,
        origin_groups: Optional[Sequence[MultitenantDistributionOriginGroupArgs]] = None,
        origins: Optional[Sequence[MultitenantDistributionOriginArgs]] = None,
        restrictions: Optional[MultitenantDistributionRestrictionsArgs] = None,
        status: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        tenant_config: Optional[MultitenantDistributionTenantConfigArgs] = None,
        timeouts: Optional[MultitenantDistributionTimeoutsArgs] = None,
        viewer_certificate: Optional[MultitenantDistributionViewerCertificateArgs] = None,
        web_acl_id: Optional[str] = None) -> MultitenantDistribution
    func GetMultitenantDistribution(ctx *Context, name string, id IDInput, state *MultitenantDistributionState, opts ...ResourceOption) (*MultitenantDistribution, error)
    public static MultitenantDistribution Get(string name, Input<string> id, MultitenantDistributionState? state, CustomResourceOptions? opts = null)
    public static MultitenantDistribution get(String name, Output<String> id, MultitenantDistributionState state, CustomResourceOptions options)
    resources:  _:    type: aws:cloudfront:MultitenantDistribution    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ActiveTrustedKeyGroups List<MultitenantDistributionActiveTrustedKeyGroup>
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    Arn string
    ARN for the distribution.
    CacheBehaviors List<MultitenantDistributionCacheBehavior>
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    Comment string
    Any comments you want to include about the distribution.
    ConnectionMode string
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    CustomErrorResponses List<MultitenantDistributionCustomErrorResponse>
    One or more custom error response elements. See Custom Error Response below.
    DefaultCacheBehavior MultitenantDistributionDefaultCacheBehavior
    Default cache behavior for this distribution. See Default Cache Behavior below.
    DefaultRootObject string
    Object that you want CloudFront to return when an end user requests the root URL.
    DomainName string
    Domain name corresponding to the distribution.
    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    Etag string
    Current version of the distribution's information.
    HttpVersion string
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    InProgressInvalidationBatches int
    Number of invalidation batches currently in progress.
    LastModifiedTime string
    Date and time the distribution was last modified.
    OriginGroups List<MultitenantDistributionOriginGroup>
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    Origins List<MultitenantDistributionOrigin>
    One or more origins for this distribution (multiples allowed). See Origin below.
    Restrictions MultitenantDistributionRestrictions
    Restriction configuration for this distribution. See Restrictions below.
    Status string
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    Tags Dictionary<string, string>
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll Dictionary<string, string>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    TenantConfig MultitenantDistributionTenantConfig
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    Timeouts MultitenantDistributionTimeouts
    ViewerCertificate MultitenantDistributionViewerCertificate
    SSL configuration for this distribution. See Viewer Certificate below.
    WebAclId string
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    ActiveTrustedKeyGroups []MultitenantDistributionActiveTrustedKeyGroupArgs
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    Arn string
    ARN for the distribution.
    CacheBehaviors []MultitenantDistributionCacheBehaviorArgs
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    Comment string
    Any comments you want to include about the distribution.
    ConnectionMode string
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    CustomErrorResponses []MultitenantDistributionCustomErrorResponseArgs
    One or more custom error response elements. See Custom Error Response below.
    DefaultCacheBehavior MultitenantDistributionDefaultCacheBehaviorArgs
    Default cache behavior for this distribution. See Default Cache Behavior below.
    DefaultRootObject string
    Object that you want CloudFront to return when an end user requests the root URL.
    DomainName string
    Domain name corresponding to the distribution.
    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    Etag string
    Current version of the distribution's information.
    HttpVersion string
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    InProgressInvalidationBatches int
    Number of invalidation batches currently in progress.
    LastModifiedTime string
    Date and time the distribution was last modified.
    OriginGroups []MultitenantDistributionOriginGroupArgs
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    Origins []MultitenantDistributionOriginArgs
    One or more origins for this distribution (multiples allowed). See Origin below.
    Restrictions MultitenantDistributionRestrictionsArgs
    Restriction configuration for this distribution. See Restrictions below.
    Status string
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    Tags map[string]string
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll map[string]string
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    TenantConfig MultitenantDistributionTenantConfigArgs
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    Timeouts MultitenantDistributionTimeoutsArgs
    ViewerCertificate MultitenantDistributionViewerCertificateArgs
    SSL configuration for this distribution. See Viewer Certificate below.
    WebAclId string
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    activeTrustedKeyGroups List<MultitenantDistributionActiveTrustedKeyGroup>
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    arn String
    ARN for the distribution.
    cacheBehaviors List<MultitenantDistributionCacheBehavior>
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    callerReference String
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    comment String
    Any comments you want to include about the distribution.
    connectionMode String
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    customErrorResponses List<MultitenantDistributionCustomErrorResponse>
    One or more custom error response elements. See Custom Error Response below.
    defaultCacheBehavior MultitenantDistributionDefaultCacheBehavior
    Default cache behavior for this distribution. See Default Cache Behavior below.
    defaultRootObject String
    Object that you want CloudFront to return when an end user requests the root URL.
    domainName String
    Domain name corresponding to the distribution.
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    etag String
    Current version of the distribution's information.
    httpVersion String
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    inProgressInvalidationBatches Integer
    Number of invalidation batches currently in progress.
    lastModifiedTime String
    Date and time the distribution was last modified.
    originGroups List<MultitenantDistributionOriginGroup>
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins List<MultitenantDistributionOrigin>
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions MultitenantDistributionRestrictions
    Restriction configuration for this distribution. See Restrictions below.
    status String
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tags Map<String,String>
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String,String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tenantConfig MultitenantDistributionTenantConfig
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts MultitenantDistributionTimeouts
    viewerCertificate MultitenantDistributionViewerCertificate
    SSL configuration for this distribution. See Viewer Certificate below.
    webAclId String
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    activeTrustedKeyGroups MultitenantDistributionActiveTrustedKeyGroup[]
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    arn string
    ARN for the distribution.
    cacheBehaviors MultitenantDistributionCacheBehavior[]
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    callerReference string
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    comment string
    Any comments you want to include about the distribution.
    connectionMode string
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    customErrorResponses MultitenantDistributionCustomErrorResponse[]
    One or more custom error response elements. See Custom Error Response below.
    defaultCacheBehavior MultitenantDistributionDefaultCacheBehavior
    Default cache behavior for this distribution. See Default Cache Behavior below.
    defaultRootObject string
    Object that you want CloudFront to return when an end user requests the root URL.
    domainName string
    Domain name corresponding to the distribution.
    enabled boolean
    Whether the distribution is enabled to accept end user requests for content.
    etag string
    Current version of the distribution's information.
    httpVersion string
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    inProgressInvalidationBatches number
    Number of invalidation batches currently in progress.
    lastModifiedTime string
    Date and time the distribution was last modified.
    originGroups MultitenantDistributionOriginGroup[]
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins MultitenantDistributionOrigin[]
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions MultitenantDistributionRestrictions
    Restriction configuration for this distribution. See Restrictions below.
    status string
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tags {[key: string]: string}
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll {[key: string]: string}
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tenantConfig MultitenantDistributionTenantConfig
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts MultitenantDistributionTimeouts
    viewerCertificate MultitenantDistributionViewerCertificate
    SSL configuration for this distribution. See Viewer Certificate below.
    webAclId string
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    active_trusted_key_groups Sequence[MultitenantDistributionActiveTrustedKeyGroupArgs]
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    arn str
    ARN for the distribution.
    cache_behaviors Sequence[MultitenantDistributionCacheBehaviorArgs]
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    caller_reference str
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    comment str
    Any comments you want to include about the distribution.
    connection_mode str
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    custom_error_responses Sequence[MultitenantDistributionCustomErrorResponseArgs]
    One or more custom error response elements. See Custom Error Response below.
    default_cache_behavior MultitenantDistributionDefaultCacheBehaviorArgs
    Default cache behavior for this distribution. See Default Cache Behavior below.
    default_root_object str
    Object that you want CloudFront to return when an end user requests the root URL.
    domain_name str
    Domain name corresponding to the distribution.
    enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    etag str
    Current version of the distribution's information.
    http_version str
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    in_progress_invalidation_batches int
    Number of invalidation batches currently in progress.
    last_modified_time str
    Date and time the distribution was last modified.
    origin_groups Sequence[MultitenantDistributionOriginGroupArgs]
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins Sequence[MultitenantDistributionOriginArgs]
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions MultitenantDistributionRestrictionsArgs
    Restriction configuration for this distribution. See Restrictions below.
    status str
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tags Mapping[str, str]
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tags_all Mapping[str, str]
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tenant_config MultitenantDistributionTenantConfigArgs
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts MultitenantDistributionTimeoutsArgs
    viewer_certificate MultitenantDistributionViewerCertificateArgs
    SSL configuration for this distribution. See Viewer Certificate below.
    web_acl_id str
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.
    activeTrustedKeyGroups List<Property Map>
    List of key groups that CloudFront can use to validate signed URLs or signed cookies. See Active Trusted Key Groups below.
    arn String
    ARN for the distribution.
    cacheBehaviors List<Property Map>
    Ordered list of cache behaviors resource for this distribution. See Cache Behavior below.
    callerReference String
    Internal value used by CloudFront to allow future updates to the distribution configuration.
    comment String
    Any comments you want to include about the distribution.
    connectionMode String
    Connection mode for the distribution. Always set to tenant-only for multi-tenant distributions.
    customErrorResponses List<Property Map>
    One or more custom error response elements. See Custom Error Response below.
    defaultCacheBehavior Property Map
    Default cache behavior for this distribution. See Default Cache Behavior below.
    defaultRootObject String
    Object that you want CloudFront to return when an end user requests the root URL.
    domainName String
    Domain name corresponding to the distribution.
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    etag String
    Current version of the distribution's information.
    httpVersion String
    Maximum HTTP version to support on the distribution. Allowed values are http1.1, http2, http2and3, and http3. Default: http2.
    inProgressInvalidationBatches Number
    Number of invalidation batches currently in progress.
    lastModifiedTime String
    Date and time the distribution was last modified.
    originGroups List<Property Map>
    One or more origin_group for this distribution (multiples allowed). See Origin Group below.
    origins List<Property Map>
    One or more origins for this distribution (multiples allowed). See Origin below.
    restrictions Property Map
    Restriction configuration for this distribution. See Restrictions below.
    status String
    Current status of the distribution. Deployed if the distribution's information is fully propagated throughout the Amazon CloudFront system.
    tags Map<String>
    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tenantConfig Property Map
    Tenant configuration that contains parameter definitions for multi-tenant distributions. See Tenant Config below.
    timeouts Property Map
    viewerCertificate Property Map
    SSL configuration for this distribution. See Viewer Certificate below.
    webAclId String
    Unique identifier that specifies the AWS WAF v2 web ACL to associate with this distribution.

    Supporting Types

    MultitenantDistributionActiveTrustedKeyGroup, MultitenantDistributionActiveTrustedKeyGroupArgs

    Enabled bool
    Whether any of the key groups have public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.
    Items List<MultitenantDistributionActiveTrustedKeyGroupItem>
    List of key groups. See Key Group Items below.
    Enabled bool
    Whether any of the key groups have public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.
    Items []MultitenantDistributionActiveTrustedKeyGroupItem
    List of key groups. See Key Group Items below.
    enabled Boolean
    Whether any of the key groups have public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.
    items List<MultitenantDistributionActiveTrustedKeyGroupItem>
    List of key groups. See Key Group Items below.
    enabled boolean
    Whether any of the key groups have public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.
    items MultitenantDistributionActiveTrustedKeyGroupItem[]
    List of key groups. See Key Group Items below.
    enabled bool
    Whether any of the key groups have public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.
    items Sequence[MultitenantDistributionActiveTrustedKeyGroupItem]
    List of key groups. See Key Group Items below.
    enabled Boolean
    Whether any of the key groups have public keys that CloudFront can use to verify the signatures of signed URLs and signed cookies.
    items List<Property Map>
    List of key groups. See Key Group Items below.

    MultitenantDistributionActiveTrustedKeyGroupItem, MultitenantDistributionActiveTrustedKeyGroupItemArgs

    KeyGroupId string
    ID of the key group that contains the public keys.
    KeyPairIds List<string>
    Set of active CloudFront key pairs associated with the signer that can be used to verify the signatures of signed URLs and signed cookies.
    KeyGroupId string
    ID of the key group that contains the public keys.
    KeyPairIds []string
    Set of active CloudFront key pairs associated with the signer that can be used to verify the signatures of signed URLs and signed cookies.
    keyGroupId String
    ID of the key group that contains the public keys.
    keyPairIds List<String>
    Set of active CloudFront key pairs associated with the signer that can be used to verify the signatures of signed URLs and signed cookies.
    keyGroupId string
    ID of the key group that contains the public keys.
    keyPairIds string[]
    Set of active CloudFront key pairs associated with the signer that can be used to verify the signatures of signed URLs and signed cookies.
    key_group_id str
    ID of the key group that contains the public keys.
    key_pair_ids Sequence[str]
    Set of active CloudFront key pairs associated with the signer that can be used to verify the signatures of signed URLs and signed cookies.
    keyGroupId String
    ID of the key group that contains the public keys.
    keyPairIds List<String>
    Set of active CloudFront key pairs associated with the signer that can be used to verify the signatures of signed URLs and signed cookies.

    MultitenantDistributionCacheBehavior, MultitenantDistributionCacheBehaviorArgs

    PathPattern string
    Pattern that specifies which requests you want this cache behavior to apply to.
    TargetOriginId string
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    ViewerProtocolPolicy string
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    AllowedMethods MultitenantDistributionCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    CachePolicyId string
    Unique identifier of the cache policy that is attached to the cache behavior.
    Compress bool
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    FieldLevelEncryptionId string
    Field level encryption configuration ID.
    FunctionAssociations List<MultitenantDistributionCacheBehaviorFunctionAssociation>
    Configuration block for CloudFront Functions associations. See Function Association below.
    LambdaFunctionAssociations List<MultitenantDistributionCacheBehaviorLambdaFunctionAssociation>
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    OriginRequestPolicyId string
    Unique identifier of the origin request policy that is attached to the behavior.
    RealtimeLogConfigArn string
    ARN of the real-time log configuration that is attached to this cache behavior.
    ResponseHeadersPolicyId string
    Identifier for a response headers policy.
    TrustedKeyGroups MultitenantDistributionCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    PathPattern string
    Pattern that specifies which requests you want this cache behavior to apply to.
    TargetOriginId string
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    ViewerProtocolPolicy string
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    AllowedMethods MultitenantDistributionCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    CachePolicyId string
    Unique identifier of the cache policy that is attached to the cache behavior.
    Compress bool
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    FieldLevelEncryptionId string
    Field level encryption configuration ID.
    FunctionAssociations []MultitenantDistributionCacheBehaviorFunctionAssociation
    Configuration block for CloudFront Functions associations. See Function Association below.
    LambdaFunctionAssociations []MultitenantDistributionCacheBehaviorLambdaFunctionAssociation
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    OriginRequestPolicyId string
    Unique identifier of the origin request policy that is attached to the behavior.
    RealtimeLogConfigArn string
    ARN of the real-time log configuration that is attached to this cache behavior.
    ResponseHeadersPolicyId string
    Identifier for a response headers policy.
    TrustedKeyGroups MultitenantDistributionCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    pathPattern String
    Pattern that specifies which requests you want this cache behavior to apply to.
    targetOriginId String
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewerProtocolPolicy String
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowedMethods MultitenantDistributionCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cachePolicyId String
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress Boolean
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    fieldLevelEncryptionId String
    Field level encryption configuration ID.
    functionAssociations List<MultitenantDistributionCacheBehaviorFunctionAssociation>
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambdaFunctionAssociations List<MultitenantDistributionCacheBehaviorLambdaFunctionAssociation>
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    originRequestPolicyId String
    Unique identifier of the origin request policy that is attached to the behavior.
    realtimeLogConfigArn String
    ARN of the real-time log configuration that is attached to this cache behavior.
    responseHeadersPolicyId String
    Identifier for a response headers policy.
    trustedKeyGroups MultitenantDistributionCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    pathPattern string
    Pattern that specifies which requests you want this cache behavior to apply to.
    targetOriginId string
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewerProtocolPolicy string
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowedMethods MultitenantDistributionCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cachePolicyId string
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress boolean
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    fieldLevelEncryptionId string
    Field level encryption configuration ID.
    functionAssociations MultitenantDistributionCacheBehaviorFunctionAssociation[]
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambdaFunctionAssociations MultitenantDistributionCacheBehaviorLambdaFunctionAssociation[]
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    originRequestPolicyId string
    Unique identifier of the origin request policy that is attached to the behavior.
    realtimeLogConfigArn string
    ARN of the real-time log configuration that is attached to this cache behavior.
    responseHeadersPolicyId string
    Identifier for a response headers policy.
    trustedKeyGroups MultitenantDistributionCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    path_pattern str
    Pattern that specifies which requests you want this cache behavior to apply to.
    target_origin_id str
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewer_protocol_policy str
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowed_methods MultitenantDistributionCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cache_policy_id str
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress bool
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    field_level_encryption_id str
    Field level encryption configuration ID.
    function_associations Sequence[MultitenantDistributionCacheBehaviorFunctionAssociation]
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambda_function_associations Sequence[MultitenantDistributionCacheBehaviorLambdaFunctionAssociation]
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    origin_request_policy_id str
    Unique identifier of the origin request policy that is attached to the behavior.
    realtime_log_config_arn str
    ARN of the real-time log configuration that is attached to this cache behavior.
    response_headers_policy_id str
    Identifier for a response headers policy.
    trusted_key_groups MultitenantDistributionCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    pathPattern String
    Pattern that specifies which requests you want this cache behavior to apply to.
    targetOriginId String
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewerProtocolPolicy String
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowedMethods Property Map
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cachePolicyId String
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress Boolean
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    fieldLevelEncryptionId String
    Field level encryption configuration ID.
    functionAssociations List<Property Map>
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambdaFunctionAssociations List<Property Map>
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    originRequestPolicyId String
    Unique identifier of the origin request policy that is attached to the behavior.
    realtimeLogConfigArn String
    ARN of the real-time log configuration that is attached to this cache behavior.
    responseHeadersPolicyId String
    Identifier for a response headers policy.
    trustedKeyGroups Property Map
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.

    MultitenantDistributionCacheBehaviorAllowedMethods, MultitenantDistributionCacheBehaviorAllowedMethodsArgs

    CachedMethods List<string>
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    Items List<string>
    CachedMethods []string
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    Items []string
    cachedMethods List<String>
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items List<String>
    cachedMethods string[]
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items string[]
    cached_methods Sequence[str]
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items Sequence[str]
    cachedMethods List<String>
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items List<String>

    MultitenantDistributionCacheBehaviorFunctionAssociation, MultitenantDistributionCacheBehaviorFunctionAssociationArgs

    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    FunctionArn string
    ARN of the CloudFront function.
    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    FunctionArn string
    ARN of the CloudFront function.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    functionArn String
    ARN of the CloudFront function.
    eventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    functionArn string
    ARN of the CloudFront function.
    event_type str
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    function_arn str
    ARN of the CloudFront function.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    functionArn String
    ARN of the CloudFront function.

    MultitenantDistributionCacheBehaviorLambdaFunctionAssociation, MultitenantDistributionCacheBehaviorLambdaFunctionAssociationArgs

    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    LambdaFunctionArn string
    ARN of the Lambda function.
    IncludeBody bool
    When set to true, the request body is exposed to the Lambda function. Default: false.
    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    LambdaFunctionArn string
    ARN of the Lambda function.
    IncludeBody bool
    When set to true, the request body is exposed to the Lambda function. Default: false.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambdaFunctionArn String
    ARN of the Lambda function.
    includeBody Boolean
    When set to true, the request body is exposed to the Lambda function. Default: false.
    eventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambdaFunctionArn string
    ARN of the Lambda function.
    includeBody boolean
    When set to true, the request body is exposed to the Lambda function. Default: false.
    event_type str
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambda_function_arn str
    ARN of the Lambda function.
    include_body bool
    When set to true, the request body is exposed to the Lambda function. Default: false.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambdaFunctionArn String
    ARN of the Lambda function.
    includeBody Boolean
    When set to true, the request body is exposed to the Lambda function. Default: false.

    MultitenantDistributionCacheBehaviorTrustedKeyGroups, MultitenantDistributionCacheBehaviorTrustedKeyGroupsArgs

    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    Items List<string>
    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    Items []string
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    items List<String>
    enabled boolean
    Whether the distribution is enabled to accept end user requests for content.
    items string[]
    enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    items Sequence[str]
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    items List<String>

    MultitenantDistributionCustomErrorResponse, MultitenantDistributionCustomErrorResponseArgs

    ErrorCode int
    HTTP status code for which you want to specify a custom error page and/or a caching duration.
    ErrorCachingMinTtl int
    Minimum amount of time that you want CloudFront to cache the HTTP status code specified in ErrorCode.
    ResponseCode string
    HTTP status code that you want CloudFront to return to the viewer along with the custom error page.
    ResponsePagePath string
    Path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ErrorCode.
    ErrorCode int
    HTTP status code for which you want to specify a custom error page and/or a caching duration.
    ErrorCachingMinTtl int
    Minimum amount of time that you want CloudFront to cache the HTTP status code specified in ErrorCode.
    ResponseCode string
    HTTP status code that you want CloudFront to return to the viewer along with the custom error page.
    ResponsePagePath string
    Path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ErrorCode.
    errorCode Integer
    HTTP status code for which you want to specify a custom error page and/or a caching duration.
    errorCachingMinTtl Integer
    Minimum amount of time that you want CloudFront to cache the HTTP status code specified in ErrorCode.
    responseCode String
    HTTP status code that you want CloudFront to return to the viewer along with the custom error page.
    responsePagePath String
    Path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ErrorCode.
    errorCode number
    HTTP status code for which you want to specify a custom error page and/or a caching duration.
    errorCachingMinTtl number
    Minimum amount of time that you want CloudFront to cache the HTTP status code specified in ErrorCode.
    responseCode string
    HTTP status code that you want CloudFront to return to the viewer along with the custom error page.
    responsePagePath string
    Path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ErrorCode.
    error_code int
    HTTP status code for which you want to specify a custom error page and/or a caching duration.
    error_caching_min_ttl int
    Minimum amount of time that you want CloudFront to cache the HTTP status code specified in ErrorCode.
    response_code str
    HTTP status code that you want CloudFront to return to the viewer along with the custom error page.
    response_page_path str
    Path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ErrorCode.
    errorCode Number
    HTTP status code for which you want to specify a custom error page and/or a caching duration.
    errorCachingMinTtl Number
    Minimum amount of time that you want CloudFront to cache the HTTP status code specified in ErrorCode.
    responseCode String
    HTTP status code that you want CloudFront to return to the viewer along with the custom error page.
    responsePagePath String
    Path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ErrorCode.

    MultitenantDistributionDefaultCacheBehavior, MultitenantDistributionDefaultCacheBehaviorArgs

    TargetOriginId string
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    ViewerProtocolPolicy string
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    AllowedMethods MultitenantDistributionDefaultCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    CachePolicyId string
    Unique identifier of the cache policy that is attached to the cache behavior.
    Compress bool
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    FieldLevelEncryptionId string
    Field level encryption configuration ID.
    FunctionAssociations List<MultitenantDistributionDefaultCacheBehaviorFunctionAssociation>
    Configuration block for CloudFront Functions associations. See Function Association below.
    LambdaFunctionAssociations List<MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociation>
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    OriginRequestPolicyId string
    Unique identifier of the origin request policy that is attached to the behavior.
    RealtimeLogConfigArn string
    ARN of the real-time log configuration that is attached to this cache behavior.
    ResponseHeadersPolicyId string
    Identifier for a response headers policy.
    TrustedKeyGroups MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    TargetOriginId string
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    ViewerProtocolPolicy string
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    AllowedMethods MultitenantDistributionDefaultCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    CachePolicyId string
    Unique identifier of the cache policy that is attached to the cache behavior.
    Compress bool
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    FieldLevelEncryptionId string
    Field level encryption configuration ID.
    FunctionAssociations []MultitenantDistributionDefaultCacheBehaviorFunctionAssociation
    Configuration block for CloudFront Functions associations. See Function Association below.
    LambdaFunctionAssociations []MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociation
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    OriginRequestPolicyId string
    Unique identifier of the origin request policy that is attached to the behavior.
    RealtimeLogConfigArn string
    ARN of the real-time log configuration that is attached to this cache behavior.
    ResponseHeadersPolicyId string
    Identifier for a response headers policy.
    TrustedKeyGroups MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    targetOriginId String
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewerProtocolPolicy String
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowedMethods MultitenantDistributionDefaultCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cachePolicyId String
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress Boolean
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    fieldLevelEncryptionId String
    Field level encryption configuration ID.
    functionAssociations List<MultitenantDistributionDefaultCacheBehaviorFunctionAssociation>
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambdaFunctionAssociations List<MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociation>
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    originRequestPolicyId String
    Unique identifier of the origin request policy that is attached to the behavior.
    realtimeLogConfigArn String
    ARN of the real-time log configuration that is attached to this cache behavior.
    responseHeadersPolicyId String
    Identifier for a response headers policy.
    trustedKeyGroups MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    targetOriginId string
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewerProtocolPolicy string
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowedMethods MultitenantDistributionDefaultCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cachePolicyId string
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress boolean
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    fieldLevelEncryptionId string
    Field level encryption configuration ID.
    functionAssociations MultitenantDistributionDefaultCacheBehaviorFunctionAssociation[]
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambdaFunctionAssociations MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociation[]
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    originRequestPolicyId string
    Unique identifier of the origin request policy that is attached to the behavior.
    realtimeLogConfigArn string
    ARN of the real-time log configuration that is attached to this cache behavior.
    responseHeadersPolicyId string
    Identifier for a response headers policy.
    trustedKeyGroups MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    target_origin_id str
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewer_protocol_policy str
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowed_methods MultitenantDistributionDefaultCacheBehaviorAllowedMethods
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cache_policy_id str
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress bool
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    field_level_encryption_id str
    Field level encryption configuration ID.
    function_associations Sequence[MultitenantDistributionDefaultCacheBehaviorFunctionAssociation]
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambda_function_associations Sequence[MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociation]
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    origin_request_policy_id str
    Unique identifier of the origin request policy that is attached to the behavior.
    realtime_log_config_arn str
    ARN of the real-time log configuration that is attached to this cache behavior.
    response_headers_policy_id str
    Identifier for a response headers policy.
    trusted_key_groups MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroups
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.
    targetOriginId String
    Value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
    viewerProtocolPolicy String
    Use this element to specify the protocol that users can use to access the files in the origin specified by TargetOriginId when a request matches the path pattern in PathPattern. One of allow-all, https-only, or redirect-to-https.
    allowedMethods Property Map
    Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
    cachePolicyId String
    Unique identifier of the cache policy that is attached to the cache behavior.
    compress Boolean
    Whether you want CloudFront to automatically compress content for web requests that include Accept-Encoding: gzip in the request header. Default: false.
    fieldLevelEncryptionId String
    Field level encryption configuration ID.
    functionAssociations List<Property Map>
    Configuration block for CloudFront Functions associations. See Function Association below.
    lambdaFunctionAssociations List<Property Map>
    Configuration block for Lambda@Edge associations. See Lambda Function Association below.
    originRequestPolicyId String
    Unique identifier of the origin request policy that is attached to the behavior.
    realtimeLogConfigArn String
    ARN of the real-time log configuration that is attached to this cache behavior.
    responseHeadersPolicyId String
    Identifier for a response headers policy.
    trustedKeyGroups Property Map
    List of key group IDs that CloudFront can use to validate signed URLs or signed cookies.

    MultitenantDistributionDefaultCacheBehaviorAllowedMethods, MultitenantDistributionDefaultCacheBehaviorAllowedMethodsArgs

    CachedMethods List<string>
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    Items List<string>
    CachedMethods []string
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    Items []string
    cachedMethods List<String>
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items List<String>
    cachedMethods string[]
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items string[]
    cached_methods Sequence[str]
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items Sequence[str]
    cachedMethods List<String>
    Controls whether CloudFront caches the response to requests using the specified HTTP methods.
    items List<String>

    MultitenantDistributionDefaultCacheBehaviorFunctionAssociation, MultitenantDistributionDefaultCacheBehaviorFunctionAssociationArgs

    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    FunctionArn string
    ARN of the CloudFront function.
    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    FunctionArn string
    ARN of the CloudFront function.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    functionArn String
    ARN of the CloudFront function.
    eventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    functionArn string
    ARN of the CloudFront function.
    event_type str
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    function_arn str
    ARN of the CloudFront function.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    functionArn String
    ARN of the CloudFront function.

    MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociation, MultitenantDistributionDefaultCacheBehaviorLambdaFunctionAssociationArgs

    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    LambdaFunctionArn string
    ARN of the Lambda function.
    IncludeBody bool
    When set to true, the request body is exposed to the Lambda function. Default: false.
    EventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    LambdaFunctionArn string
    ARN of the Lambda function.
    IncludeBody bool
    When set to true, the request body is exposed to the Lambda function. Default: false.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambdaFunctionArn String
    ARN of the Lambda function.
    includeBody Boolean
    When set to true, the request body is exposed to the Lambda function. Default: false.
    eventType string
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambdaFunctionArn string
    ARN of the Lambda function.
    includeBody boolean
    When set to true, the request body is exposed to the Lambda function. Default: false.
    event_type str
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambda_function_arn str
    ARN of the Lambda function.
    include_body bool
    When set to true, the request body is exposed to the Lambda function. Default: false.
    eventType String
    Specific event to trigger this function. Valid values: viewer-request, origin-request, viewer-response, origin-response.
    lambdaFunctionArn String
    ARN of the Lambda function.
    includeBody Boolean
    When set to true, the request body is exposed to the Lambda function. Default: false.

    MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroups, MultitenantDistributionDefaultCacheBehaviorTrustedKeyGroupsArgs

    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    Items List<string>
    Enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    Items []string
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    items List<String>
    enabled boolean
    Whether the distribution is enabled to accept end user requests for content.
    items string[]
    enabled bool
    Whether the distribution is enabled to accept end user requests for content.
    items Sequence[str]
    enabled Boolean
    Whether the distribution is enabled to accept end user requests for content.
    items List<String>

    MultitenantDistributionOrigin, MultitenantDistributionOriginArgs

    DomainName string
    DNS domain name of either the S3 bucket, or web site of your custom origin.
    Id string
    Identifier for the distribution.
    ConnectionAttempts int
    Number of times that CloudFront attempts to connect to the origin. Must be between 1-3. Default: 3.
    ConnectionTimeout int
    Number of seconds that CloudFront waits when trying to establish a connection to the origin. Must be between 1-10. Default: 10.
    CustomHeaders List<MultitenantDistributionOriginCustomHeader>
    One or more sub-resources with name and value parameters that specify header data that will be sent to the origin. See Custom Header below.
    CustomOriginConfigs List<MultitenantDistributionOriginCustomOriginConfig>
    CloudFront origin access identity to associate with the origin. See Custom Origin Config below.
    OriginAccessControlId string
    CloudFront origin access control identifier to associate with the origin.
    OriginPath string
    Optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
    OriginShields List<MultitenantDistributionOriginOriginShield>
    CloudFront Origin Shield configuration information. See Origin Shield below.
    ResponseCompletionTimeout int
    Number of seconds that CloudFront waits for a response after forwarding a request to the origin. Default: 30.
    VpcOriginConfigs List<MultitenantDistributionOriginVpcOriginConfig>
    CloudFront VPC origin configuration. See VPC Origin Config below.
    DomainName string
    DNS domain name of either the S3 bucket, or web site of your custom origin.
    Id string
    Identifier for the distribution.
    ConnectionAttempts int
    Number of times that CloudFront attempts to connect to the origin. Must be between 1-3. Default: 3.
    ConnectionTimeout int
    Number of seconds that CloudFront waits when trying to establish a connection to the origin. Must be between 1-10. Default: 10.
    CustomHeaders []MultitenantDistributionOriginCustomHeader
    One or more sub-resources with name and value parameters that specify header data that will be sent to the origin. See Custom Header below.
    CustomOriginConfigs []MultitenantDistributionOriginCustomOriginConfig
    CloudFront origin access identity to associate with the origin. See Custom Origin Config below.
    OriginAccessControlId string
    CloudFront origin access control identifier to associate with the origin.
    OriginPath string
    Optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
    OriginShields []MultitenantDistributionOriginOriginShield
    CloudFront Origin Shield configuration information. See Origin Shield below.
    ResponseCompletionTimeout int
    Number of seconds that CloudFront waits for a response after forwarding a request to the origin. Default: 30.
    VpcOriginConfigs []MultitenantDistributionOriginVpcOriginConfig
    CloudFront VPC origin configuration. See VPC Origin Config below.
    domainName String
    DNS domain name of either the S3 bucket, or web site of your custom origin.
    id String
    Identifier for the distribution.
    connectionAttempts Integer
    Number of times that CloudFront attempts to connect to the origin. Must be between 1-3. Default: 3.
    connectionTimeout Integer
    Number of seconds that CloudFront waits when trying to establish a connection to the origin. Must be between 1-10. Default: 10.
    customHeaders List<MultitenantDistributionOriginCustomHeader>
    One or more sub-resources with name and value parameters that specify header data that will be sent to the origin. See Custom Header below.
    customOriginConfigs List<MultitenantDistributionOriginCustomOriginConfig>
    CloudFront origin access identity to associate with the origin. See Custom Origin Config below.
    originAccessControlId String
    CloudFront origin access control identifier to associate with the origin.
    originPath String
    Optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
    originShields List<MultitenantDistributionOriginOriginShield>
    CloudFront Origin Shield configuration information. See Origin Shield below.
    responseCompletionTimeout Integer
    Number of seconds that CloudFront waits for a response after forwarding a request to the origin. Default: 30.
    vpcOriginConfigs List<MultitenantDistributionOriginVpcOriginConfig>
    CloudFront VPC origin configuration. See VPC Origin Config below.
    domainName string
    DNS domain name of either the S3 bucket, or web site of your custom origin.
    id string
    Identifier for the distribution.
    connectionAttempts number
    Number of times that CloudFront attempts to connect to the origin. Must be between 1-3. Default: 3.
    connectionTimeout number
    Number of seconds that CloudFront waits when trying to establish a connection to the origin. Must be between 1-10. Default: 10.
    customHeaders MultitenantDistributionOriginCustomHeader[]
    One or more sub-resources with name and value parameters that specify header data that will be sent to the origin. See Custom Header below.
    customOriginConfigs MultitenantDistributionOriginCustomOriginConfig[]
    CloudFront origin access identity to associate with the origin. See Custom Origin Config below.
    originAccessControlId string
    CloudFront origin access control identifier to associate with the origin.
    originPath string
    Optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
    originShields MultitenantDistributionOriginOriginShield[]
    CloudFront Origin Shield configuration information. See Origin Shield below.
    responseCompletionTimeout number
    Number of seconds that CloudFront waits for a response after forwarding a request to the origin. Default: 30.
    vpcOriginConfigs MultitenantDistributionOriginVpcOriginConfig[]
    CloudFront VPC origin configuration. See VPC Origin Config below.
    domain_name str
    DNS domain name of either the S3 bucket, or web site of your custom origin.
    id str
    Identifier for the distribution.
    connection_attempts int
    Number of times that CloudFront attempts to connect to the origin. Must be between 1-3. Default: 3.
    connection_timeout int
    Number of seconds that CloudFront waits when trying to establish a connection to the origin. Must be between 1-10. Default: 10.
    custom_headers Sequence[MultitenantDistributionOriginCustomHeader]
    One or more sub-resources with name and value parameters that specify header data that will be sent to the origin. See Custom Header below.
    custom_origin_configs Sequence[MultitenantDistributionOriginCustomOriginConfig]
    CloudFront origin access identity to associate with the origin. See Custom Origin Config below.
    origin_access_control_id str
    CloudFront origin access control identifier to associate with the origin.
    origin_path str
    Optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
    origin_shields Sequence[MultitenantDistributionOriginOriginShield]
    CloudFront Origin Shield configuration information. See Origin Shield below.
    response_completion_timeout int
    Number of seconds that CloudFront waits for a response after forwarding a request to the origin. Default: 30.
    vpc_origin_configs Sequence[MultitenantDistributionOriginVpcOriginConfig]
    CloudFront VPC origin configuration. See VPC Origin Config below.
    domainName String
    DNS domain name of either the S3 bucket, or web site of your custom origin.
    id String
    Identifier for the distribution.
    connectionAttempts Number
    Number of times that CloudFront attempts to connect to the origin. Must be between 1-3. Default: 3.
    connectionTimeout Number
    Number of seconds that CloudFront waits when trying to establish a connection to the origin. Must be between 1-10. Default: 10.
    customHeaders List<Property Map>
    One or more sub-resources with name and value parameters that specify header data that will be sent to the origin. See Custom Header below.
    customOriginConfigs List<Property Map>
    CloudFront origin access identity to associate with the origin. See Custom Origin Config below.
    originAccessControlId String
    CloudFront origin access control identifier to associate with the origin.
    originPath String
    Optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
    originShields List<Property Map>
    CloudFront Origin Shield configuration information. See Origin Shield below.
    responseCompletionTimeout Number
    Number of seconds that CloudFront waits for a response after forwarding a request to the origin. Default: 30.
    vpcOriginConfigs List<Property Map>
    CloudFront VPC origin configuration. See VPC Origin Config below.

    MultitenantDistributionOriginCustomHeader, MultitenantDistributionOriginCustomHeaderArgs

    HeaderName string
    Name of the header.
    HeaderValue string
    Value for the header.
    HeaderName string
    Name of the header.
    HeaderValue string
    Value for the header.
    headerName String
    Name of the header.
    headerValue String
    Value for the header.
    headerName string
    Name of the header.
    headerValue string
    Value for the header.
    header_name str
    Name of the header.
    header_value str
    Value for the header.
    headerName String
    Name of the header.
    headerValue String
    Value for the header.

    MultitenantDistributionOriginCustomOriginConfig, MultitenantDistributionOriginCustomOriginConfigArgs

    HttpPort int
    HTTP port the custom origin listens on.
    HttpsPort int
    HTTPS port the custom origin listens on.
    OriginProtocolPolicy string
    Origin protocol policy to apply to your origin. Valid values are http-only, https-only, and match-viewer.
    OriginSslProtocols List<string>
    List of SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS.
    IpAddressType string
    Type of IP addresses used by your origins. Valid values are ipv4 and dualstack.
    OriginKeepaliveTimeout int
    Custom keep-alive timeout, in seconds. Default: 5.
    OriginReadTimeout int
    Custom read timeout, in seconds. Default: 30.
    HttpPort int
    HTTP port the custom origin listens on.
    HttpsPort int
    HTTPS port the custom origin listens on.
    OriginProtocolPolicy string
    Origin protocol policy to apply to your origin. Valid values are http-only, https-only, and match-viewer.
    OriginSslProtocols []string
    List of SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS.
    IpAddressType string
    Type of IP addresses used by your origins. Valid values are ipv4 and dualstack.
    OriginKeepaliveTimeout int
    Custom keep-alive timeout, in seconds. Default: 5.
    OriginReadTimeout int
    Custom read timeout, in seconds. Default: 30.
    httpPort Integer
    HTTP port the custom origin listens on.
    httpsPort Integer
    HTTPS port the custom origin listens on.
    originProtocolPolicy String
    Origin protocol policy to apply to your origin. Valid values are http-only, https-only, and match-viewer.
    originSslProtocols List<String>
    List of SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS.
    ipAddressType String
    Type of IP addresses used by your origins. Valid values are ipv4 and dualstack.
    originKeepaliveTimeout Integer
    Custom keep-alive timeout, in seconds. Default: 5.
    originReadTimeout Integer
    Custom read timeout, in seconds. Default: 30.
    httpPort number
    HTTP port the custom origin listens on.
    httpsPort number
    HTTPS port the custom origin listens on.
    originProtocolPolicy string
    Origin protocol policy to apply to your origin. Valid values are http-only, https-only, and match-viewer.
    originSslProtocols string[]
    List of SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS.
    ipAddressType string
    Type of IP addresses used by your origins. Valid values are ipv4 and dualstack.
    originKeepaliveTimeout number
    Custom keep-alive timeout, in seconds. Default: 5.
    originReadTimeout number
    Custom read timeout, in seconds. Default: 30.
    http_port int
    HTTP port the custom origin listens on.
    https_port int
    HTTPS port the custom origin listens on.
    origin_protocol_policy str
    Origin protocol policy to apply to your origin. Valid values are http-only, https-only, and match-viewer.
    origin_ssl_protocols Sequence[str]
    List of SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS.
    ip_address_type str
    Type of IP addresses used by your origins. Valid values are ipv4 and dualstack.
    origin_keepalive_timeout int
    Custom keep-alive timeout, in seconds. Default: 5.
    origin_read_timeout int
    Custom read timeout, in seconds. Default: 30.
    httpPort Number
    HTTP port the custom origin listens on.
    httpsPort Number
    HTTPS port the custom origin listens on.
    originProtocolPolicy String
    Origin protocol policy to apply to your origin. Valid values are http-only, https-only, and match-viewer.
    originSslProtocols List<String>
    List of SSL/TLS protocols that you want CloudFront to use when communicating with your origin over HTTPS.
    ipAddressType String
    Type of IP addresses used by your origins. Valid values are ipv4 and dualstack.
    originKeepaliveTimeout Number
    Custom keep-alive timeout, in seconds. Default: 5.
    originReadTimeout Number
    Custom read timeout, in seconds. Default: 30.

    MultitenantDistributionOriginGroup, MultitenantDistributionOriginGroupArgs

    OriginId string
    Unique identifier for the origin group.
    FailoverCriteria MultitenantDistributionOriginGroupFailoverCriteria
    Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
    Members List<MultitenantDistributionOriginGroupMember>
    List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
    OriginId string
    Unique identifier for the origin group.
    FailoverCriteria MultitenantDistributionOriginGroupFailoverCriteria
    Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
    Members []MultitenantDistributionOriginGroupMember
    List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
    originId String
    Unique identifier for the origin group.
    failoverCriteria MultitenantDistributionOriginGroupFailoverCriteria
    Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
    members List<MultitenantDistributionOriginGroupMember>
    List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
    originId string
    Unique identifier for the origin group.
    failoverCriteria MultitenantDistributionOriginGroupFailoverCriteria
    Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
    members MultitenantDistributionOriginGroupMember[]
    List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
    origin_id str
    Unique identifier for the origin group.
    failover_criteria MultitenantDistributionOriginGroupFailoverCriteria
    Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
    members Sequence[MultitenantDistributionOriginGroupMember]
    List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
    originId String
    Unique identifier for the origin group.
    failoverCriteria Property Map
    Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
    members List<Property Map>
    List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.

    MultitenantDistributionOriginGroupFailoverCriteria, MultitenantDistributionOriginGroupFailoverCriteriaArgs

    StatusCodes List<int>
    List of HTTP status codes that trigger a failover to the secondary origin.
    StatusCodes []int
    List of HTTP status codes that trigger a failover to the secondary origin.
    statusCodes List<Integer>
    List of HTTP status codes that trigger a failover to the secondary origin.
    statusCodes number[]
    List of HTTP status codes that trigger a failover to the secondary origin.
    status_codes Sequence[int]
    List of HTTP status codes that trigger a failover to the secondary origin.
    statusCodes List<Number>
    List of HTTP status codes that trigger a failover to the secondary origin.

    MultitenantDistributionOriginGroupMember, MultitenantDistributionOriginGroupMemberArgs

    OriginId string
    OriginId string
    originId String
    originId string
    originId String

    MultitenantDistributionOriginOriginShield, MultitenantDistributionOriginOriginShieldArgs

    Enabled bool
    Whether Origin Shield is enabled.
    OriginShieldRegion string
    AWS Region for Origin Shield. Required when enabled is true.
    Enabled bool
    Whether Origin Shield is enabled.
    OriginShieldRegion string
    AWS Region for Origin Shield. Required when enabled is true.
    enabled Boolean
    Whether Origin Shield is enabled.
    originShieldRegion String
    AWS Region for Origin Shield. Required when enabled is true.
    enabled boolean
    Whether Origin Shield is enabled.
    originShieldRegion string
    AWS Region for Origin Shield. Required when enabled is true.
    enabled bool
    Whether Origin Shield is enabled.
    origin_shield_region str
    AWS Region for Origin Shield. Required when enabled is true.
    enabled Boolean
    Whether Origin Shield is enabled.
    originShieldRegion String
    AWS Region for Origin Shield. Required when enabled is true.

    MultitenantDistributionOriginVpcOriginConfig, MultitenantDistributionOriginVpcOriginConfigArgs

    VpcOriginId string
    ID of the VPC origin that you want CloudFront to route requests to.
    OriginKeepaliveTimeout int
    Custom keep-alive timeout, in seconds. By default, CloudFront uses a default timeout. Default: 5.
    OriginReadTimeout int
    Custom read timeout, in seconds. By default, CloudFront uses a default timeout. Default: 30.
    VpcOriginId string
    ID of the VPC origin that you want CloudFront to route requests to.
    OriginKeepaliveTimeout int
    Custom keep-alive timeout, in seconds. By default, CloudFront uses a default timeout. Default: 5.
    OriginReadTimeout int
    Custom read timeout, in seconds. By default, CloudFront uses a default timeout. Default: 30.
    vpcOriginId String
    ID of the VPC origin that you want CloudFront to route requests to.
    originKeepaliveTimeout Integer
    Custom keep-alive timeout, in seconds. By default, CloudFront uses a default timeout. Default: 5.
    originReadTimeout Integer
    Custom read timeout, in seconds. By default, CloudFront uses a default timeout. Default: 30.
    vpcOriginId string
    ID of the VPC origin that you want CloudFront to route requests to.
    originKeepaliveTimeout number
    Custom keep-alive timeout, in seconds. By default, CloudFront uses a default timeout. Default: 5.
    originReadTimeout number
    Custom read timeout, in seconds. By default, CloudFront uses a default timeout. Default: 30.
    vpc_origin_id str
    ID of the VPC origin that you want CloudFront to route requests to.
    origin_keepalive_timeout int
    Custom keep-alive timeout, in seconds. By default, CloudFront uses a default timeout. Default: 5.
    origin_read_timeout int
    Custom read timeout, in seconds. By default, CloudFront uses a default timeout. Default: 30.
    vpcOriginId String
    ID of the VPC origin that you want CloudFront to route requests to.
    originKeepaliveTimeout Number
    Custom keep-alive timeout, in seconds. By default, CloudFront uses a default timeout. Default: 5.
    originReadTimeout Number
    Custom read timeout, in seconds. By default, CloudFront uses a default timeout. Default: 30.

    MultitenantDistributionRestrictions, MultitenantDistributionRestrictionsArgs

    GeoRestriction MultitenantDistributionRestrictionsGeoRestriction
    Geographic restriction configuration. See Geo Restriction below.
    GeoRestriction MultitenantDistributionRestrictionsGeoRestriction
    Geographic restriction configuration. See Geo Restriction below.
    geoRestriction MultitenantDistributionRestrictionsGeoRestriction
    Geographic restriction configuration. See Geo Restriction below.
    geoRestriction MultitenantDistributionRestrictionsGeoRestriction
    Geographic restriction configuration. See Geo Restriction below.
    geo_restriction MultitenantDistributionRestrictionsGeoRestriction
    Geographic restriction configuration. See Geo Restriction below.
    geoRestriction Property Map
    Geographic restriction configuration. See Geo Restriction below.

    MultitenantDistributionRestrictionsGeoRestriction, MultitenantDistributionRestrictionsGeoRestrictionArgs

    RestrictionType string
    Method to restrict distribution of your content by country. Valid values are none, whitelist, and blacklist.
    Items List<string>
    List of ISO 3166-1-alpha-2 country codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). Required when restriction_type is whitelist or blacklist.
    RestrictionType string
    Method to restrict distribution of your content by country. Valid values are none, whitelist, and blacklist.
    Items []string
    List of ISO 3166-1-alpha-2 country codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). Required when restriction_type is whitelist or blacklist.
    restrictionType String
    Method to restrict distribution of your content by country. Valid values are none, whitelist, and blacklist.
    items List<String>
    List of ISO 3166-1-alpha-2 country codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). Required when restriction_type is whitelist or blacklist.
    restrictionType string
    Method to restrict distribution of your content by country. Valid values are none, whitelist, and blacklist.
    items string[]
    List of ISO 3166-1-alpha-2 country codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). Required when restriction_type is whitelist or blacklist.
    restriction_type str
    Method to restrict distribution of your content by country. Valid values are none, whitelist, and blacklist.
    items Sequence[str]
    List of ISO 3166-1-alpha-2 country codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). Required when restriction_type is whitelist or blacklist.
    restrictionType String
    Method to restrict distribution of your content by country. Valid values are none, whitelist, and blacklist.
    items List<String>
    List of ISO 3166-1-alpha-2 country codes for which you want CloudFront either to distribute your content (whitelist) or not distribute your content (blacklist). Required when restriction_type is whitelist or blacklist.

    MultitenantDistributionTenantConfig, MultitenantDistributionTenantConfigArgs

    ParameterDefinitions List<MultitenantDistributionTenantConfigParameterDefinition>
    One or more parameter definitions for the tenant configuration. See Parameter Definition below.
    ParameterDefinitions []MultitenantDistributionTenantConfigParameterDefinition
    One or more parameter definitions for the tenant configuration. See Parameter Definition below.
    parameterDefinitions List<MultitenantDistributionTenantConfigParameterDefinition>
    One or more parameter definitions for the tenant configuration. See Parameter Definition below.
    parameterDefinitions MultitenantDistributionTenantConfigParameterDefinition[]
    One or more parameter definitions for the tenant configuration. See Parameter Definition below.
    parameter_definitions Sequence[MultitenantDistributionTenantConfigParameterDefinition]
    One or more parameter definitions for the tenant configuration. See Parameter Definition below.
    parameterDefinitions List<Property Map>
    One or more parameter definitions for the tenant configuration. See Parameter Definition below.

    MultitenantDistributionTenantConfigParameterDefinition, MultitenantDistributionTenantConfigParameterDefinitionArgs

    Name string
    Name of the parameter.
    Definitions List<MultitenantDistributionTenantConfigParameterDefinitionDefinition>
    Definition of the parameter schema. See Parameter Definition Schema below.
    Name string
    Name of the parameter.
    Definitions []MultitenantDistributionTenantConfigParameterDefinitionDefinition
    Definition of the parameter schema. See Parameter Definition Schema below.
    name String
    Name of the parameter.
    definitions List<MultitenantDistributionTenantConfigParameterDefinitionDefinition>
    Definition of the parameter schema. See Parameter Definition Schema below.
    name string
    Name of the parameter.
    definitions MultitenantDistributionTenantConfigParameterDefinitionDefinition[]
    Definition of the parameter schema. See Parameter Definition Schema below.
    name str
    Name of the parameter.
    definitions Sequence[MultitenantDistributionTenantConfigParameterDefinitionDefinition]
    Definition of the parameter schema. See Parameter Definition Schema below.
    name String
    Name of the parameter.
    definitions List<Property Map>
    Definition of the parameter schema. See Parameter Definition Schema below.

    MultitenantDistributionTenantConfigParameterDefinitionDefinition, MultitenantDistributionTenantConfigParameterDefinitionDefinitionArgs

    stringSchemas List<Property Map>
    String schema configuration. See String Schema below.

    MultitenantDistributionTenantConfigParameterDefinitionDefinitionStringSchema, MultitenantDistributionTenantConfigParameterDefinitionDefinitionStringSchemaArgs

    Required bool
    Whether the parameter is required.
    Comment string
    Comment describing the parameter.
    DefaultValue string
    Default value for the parameter.
    Required bool
    Whether the parameter is required.
    Comment string
    Comment describing the parameter.
    DefaultValue string
    Default value for the parameter.
    required Boolean
    Whether the parameter is required.
    comment String
    Comment describing the parameter.
    defaultValue String
    Default value for the parameter.
    required boolean
    Whether the parameter is required.
    comment string
    Comment describing the parameter.
    defaultValue string
    Default value for the parameter.
    required bool
    Whether the parameter is required.
    comment str
    Comment describing the parameter.
    default_value str
    Default value for the parameter.
    required Boolean
    Whether the parameter is required.
    comment String
    Comment describing the parameter.
    defaultValue String
    Default value for the parameter.

    MultitenantDistributionTimeouts, MultitenantDistributionTimeoutsArgs

    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

    MultitenantDistributionViewerCertificate, MultitenantDistributionViewerCertificateArgs

    AcmCertificateArn string
    ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Required when using a custom SSL certificate.
    CloudfrontDefaultCertificate bool
    Whether to use the CloudFront default certificate. Cannot be used with acm_certificate_arn.
    MinimumProtocolVersion string
    Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Default: TLSv1.
    SslSupportMethod string
    How you want CloudFront to serve HTTPS requests. Valid values are sni-only and vip. Required when acm_certificate_arn is specified.
    AcmCertificateArn string
    ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Required when using a custom SSL certificate.
    CloudfrontDefaultCertificate bool
    Whether to use the CloudFront default certificate. Cannot be used with acm_certificate_arn.
    MinimumProtocolVersion string
    Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Default: TLSv1.
    SslSupportMethod string
    How you want CloudFront to serve HTTPS requests. Valid values are sni-only and vip. Required when acm_certificate_arn is specified.
    acmCertificateArn String
    ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Required when using a custom SSL certificate.
    cloudfrontDefaultCertificate Boolean
    Whether to use the CloudFront default certificate. Cannot be used with acm_certificate_arn.
    minimumProtocolVersion String
    Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Default: TLSv1.
    sslSupportMethod String
    How you want CloudFront to serve HTTPS requests. Valid values are sni-only and vip. Required when acm_certificate_arn is specified.
    acmCertificateArn string
    ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Required when using a custom SSL certificate.
    cloudfrontDefaultCertificate boolean
    Whether to use the CloudFront default certificate. Cannot be used with acm_certificate_arn.
    minimumProtocolVersion string
    Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Default: TLSv1.
    sslSupportMethod string
    How you want CloudFront to serve HTTPS requests. Valid values are sni-only and vip. Required when acm_certificate_arn is specified.
    acm_certificate_arn str
    ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Required when using a custom SSL certificate.
    cloudfront_default_certificate bool
    Whether to use the CloudFront default certificate. Cannot be used with acm_certificate_arn.
    minimum_protocol_version str
    Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Default: TLSv1.
    ssl_support_method str
    How you want CloudFront to serve HTTPS requests. Valid values are sni-only and vip. Required when acm_certificate_arn is specified.
    acmCertificateArn String
    ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Required when using a custom SSL certificate.
    cloudfrontDefaultCertificate Boolean
    Whether to use the CloudFront default certificate. Cannot be used with acm_certificate_arn.
    minimumProtocolVersion String
    Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Default: TLSv1.
    sslSupportMethod String
    How you want CloudFront to serve HTTPS requests. Valid values are sni-only and vip. Required when acm_certificate_arn is specified.

    Import

    Using pulumi import, import CloudFront Multi-tenant Distributions using the id. For example:

    $ pulumi import aws:cloudfront/multitenantDistribution:MultitenantDistribution distribution E74FTE3AEXAMPLE

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    AWS v7.16.0 published on Friday, Jan 9, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws
      Meet Neo: Your AI Platform Teammate