interface StrictTransportSecurityProperty

Language	Type name
.NET	Amazon.CDK.AWS.CloudFront.CfnResponseHeadersPolicy.StrictTransportSecurityProperty
Go	github.com/aws/aws-cdk-go/awscdk/v2/awscloudfront#CfnResponseHeadersPolicy_StrictTransportSecurityProperty
Java	software.amazon.awscdk.services.cloudfront.CfnResponseHeadersPolicy.StrictTransportSecurityProperty
Python	aws_cdk.aws_cloudfront.CfnResponseHeadersPolicy.StrictTransportSecurityProperty
TypeScript	aws-cdk-lib » aws_cloudfront » CfnResponseHeadersPolicy » StrictTransportSecurityProperty

Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header's value.

For more information about the Strict-Transport-Security HTTP response header, see Strict-Transport-Security in the MDN Web Docs.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-stricttransportsecurity.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cloudfront as cloudfront } from 'aws-cdk-lib';
const strictTransportSecurityProperty: cloudfront.CfnResponseHeadersPolicy.StrictTransportSecurityProperty = {
  accessControlMaxAgeSec: 123,
  override: false,

  // the properties below are optional
  includeSubdomains: false,
  preload: false,
};

Properties

Name	Type	Description
accessControlMaxAgeSec	number	A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.
override	boolean | IResolvable	A Boolean that determines whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.
includeSubdomains?	boolean | IResolvable	A Boolean that determines whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.
preload?	boolean | IResolvable	A Boolean that determines whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.

---

accessControlMaxAgeSec

Type: number

A number that CloudFront uses as the value for the max-age directive in the Strict-Transport-Security HTTP response header.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-stricttransportsecurity.html#cfn-cloudfront-responseheaderspolicy-stricttransportsecurity-accesscontrolmaxagesec

---

override

Type: boolean | IResolvable

A Boolean that determines whether CloudFront overrides the Strict-Transport-Security HTTP response header received from the origin with the one specified in this response headers policy.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-stricttransportsecurity.html#cfn-cloudfront-responseheaderspolicy-stricttransportsecurity-override

---

includeSubdomains?

Type: boolean | IResolvable (optional)

A Boolean that determines whether CloudFront includes the includeSubDomains directive in the Strict-Transport-Security HTTP response header.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-stricttransportsecurity.html#cfn-cloudfront-responseheaderspolicy-stricttransportsecurity-includesubdomains

---

preload?

Type: boolean | IResolvable (optional)

A Boolean that determines whether CloudFront includes the preload directive in the Strict-Transport-Security HTTP response header.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-stricttransportsecurity.html#cfn-cloudfront-responseheaderspolicy-stricttransportsecurity-preload