Question

A media company serves a global single-page application from Amazon S3 through Amazon CloudFront. The product team wants to insert a custom HTTP security header and modify the response object based on the viewer's country before content is returned to the browser, without changing the origin. The logic must run at CloudFront edge locations with minimal added latency and must not require managing servers. Which solution best meets these requirements?

Accepted Answer

Use a CloudFront Function on the viewer response event to add the header and modify the response using the CloudFront-Viewer-Country header.

Answer

Deploy an Application Load Balancer in front of CloudFront and use a Lambda function to rewrite responses.

Answer

Enable S3 Object Lambda to transform objects and set S3 as a CloudFront origin.

Answer

Configure an Amazon API Gateway in front of S3 to inject headers based on the source IP.