🟒

CloudFront – Geo Restriction

Purpose

Restricts access to a CloudFront distribution based on the user’s country.

Modes

  • Allowlist – Only specified countries can access the content.
  • Blocklist – Specified countries are denied access.

How It Works

  • Country is determined using a third-party Geo-IP database.
  • Requests from restricted countries receive an HTTP 403 (Forbidden).

Common Use Cases

  • Enforcing copyright or licensing restrictions.
  • Complying with regulatory requirements for content delivery.