The auth headers are stripped out of Origin. (aws-cloudfront): Cannot set header which includes 'authorization' ⦠Like many authentication schemes in HTTP, credentials are passed in the Authorization header of the HTTP request. The AWS WAF and Shield service has a 8KB limitation on the size of the request body that it can inspect. Related to Amazon API Gateway. WAFãããã¯æã®ã¨ã©ã¼ãã¼ã¸ã¯CloudFront+S3ãä½¿ãæ¹æ³ãããã¾ãããã¡ãã®æ¹ãS3ã«éçã³ã³ãã³ããé ç½®ã§ãã¾ãã®ã§ä¸è¬çãªã¦ã¼ã¹ã±ã¼ã¹ã«åãã¦ãã¾ãã AWS WAF â¦. You will need to whitelist the Authorization header for forwarding to the origin. In our case, we only need to add âX-PSK-Authâ and a value. CloudFront "Access control allow origin header" error In order to deal ⦠Then, under Cache key contents, for Headers, select Whitelist. I have also enabled forward headers to Origin and I am able to see the headers passed when I play the video. So, in our case, our application won't ⦠Choose âOrigin Requestâ for your CloudFront event. No BLACKLIST provided to remove HOST through API, CDK, CLI. With these headers, your origin can receive information about the viewerâs device type, geographic location, and more, without the need for custom code to determine this information. Select the appropriate Distribution ID for your CloudFront distribution. CloudFront