Skip to content

CloudFront  >  Structures  >  ResponseHeadersPolicySecurityHeadersConfig

ResponseHeadersPolicySecurityHeadersConfig

Structure Class

ResponseHeadersPolicySecurityHeadersConfig dataclass

Bases: _SerdeShape

A configuration for a set of security-related HTTP response headers. CloudFront adds these headers to HTTP responses that it sends for requests that match a cache behavior associated with this response headers policy.

Attributes

content_security_policy class-attribute instance-attribute 
content_security_policy: ResponseHeadersPolicyContentSecurityPolicy | None = ...

The policy directives and their values that CloudFront includes as values for the Content-Security-Policy HTTP response header.

For more information about the Content-Security-Policy HTTP response header, see Content-Security-Policy in the MDN Web Docs.

content_type_options class-attribute instance-attribute 
content_type_options: ResponseHeadersPolicyContentTypeOptions | None = ...

Determines whether CloudFront includes the X-Content-Type-Options HTTP response header with its value set to nosniff.

For more information about the X-Content-Type-Options HTTP response header, see X-Content-Type-Options in the MDN Web Docs.

frame_options class-attribute instance-attribute 
frame_options: ResponseHeadersPolicyFrameOptions | None = ...

Determines whether CloudFront includes the X-Frame-Options HTTP response header and the header's value.

For more information about the X-Frame-Options HTTP response header, see X-Frame-Options in the MDN Web Docs.

referrer_policy class-attribute instance-attribute 
referrer_policy: ResponseHeadersPolicyReferrerPolicy | None = ...

Determines whether CloudFront includes the Referrer-Policy HTTP response header and the header's value.

For more information about the Referrer-Policy HTTP response header, see Referrer-Policy in the MDN Web Docs.

strict_transport_security class-attribute instance-attribute 
strict_transport_security: ResponseHeadersPolicyStrictTransportSecurity | None = ...

Determines whether CloudFront includes the Strict-Transport-Security HTTP response header and the header's value.

For more information about the Strict-Transport-Security HTTP response header, see Security headers in the Amazon CloudFront Developer Guide and Strict-Transport-Security in the MDN Web Docs.

xss_protection class-attribute instance-attribute 
xss_protection: ResponseHeadersPolicyXSSProtection | None = ...

Determines whether CloudFront includes the X-XSS-Protection HTTP response header and the header's value.

For more information about the X-XSS-Protection HTTP response header, see X-XSS-Protection in the MDN Web Docs.