01
Private origins
Reach an origin that has no public address.
Component 14
CloudFront VPC Origin
Connect CloudFront to a private load balancer or endpoint that has no public address.
Status
Available component
Deployment scope
Global edge to a regional origin
Usage example
Inputs in, outputs out. Illustrative wiring, not a standalone deployment.
Point the component at an existing internal load balancer or endpoint ARN. Create the distribution separately, or let the Internet Ingress blueprint wire both together. Configure provider requirements and credentials in your root module; check the documentation for all required inputs and version changes.
main.tf
module "app_origin" {
source = "pomo-studio/cloudfront-vpc-origin/aws"
version = "~> 0.1"
name = "orders-blue"
origin_arn = aws_lb.orders.arn
}Key inputs
- name
- origin_arn
- http_port
- https_port
- origin_protocol_policy
- origin_ssl_protocols
Useful outputs
- id
- arn
What you get
02
One per deployment
Keep blue and green on their own connections.
03
Explicit TLS
Choose the protocol CloudFront negotiates with the origin.
Patterns that use this component
- Private Origin
Serve a private backend through CloudFront without exposing it to the internet.
Built with
- Amazon CloudFront
- VPC origin
- Terraform