AWS Security ChangesHomeSearch

AWS AmazonCloudFront documentation change

Service: AmazonCloudFront · 2025-05-01 · Documentation low

File: AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.md

Summary

Added new 'Quotas on multi-tenant distributions' section detailing limits for distribution tenants, connection groups, aliases, and parameters

Security assessment

The change adds operational quotas for multi-tenant distribution configurations but contains no security-related content. Quotas are resource limitations rather than security controls. No vulnerabilities, access controls, or encryption aspects are mentioned.

Diff

diff --git a/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.md b/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.md
index 73a43d30d..97055670c 100644
--- a//AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.md
+++ b//AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.md
@@ -5 +5 @@
-General quotasGeneral quotas on distributionsGeneral quotas on policiesQuotas on CloudFront FunctionsQuotas on key value storesQuotas on Lambda@EdgeQuotas on SSL certificatesQuotas on invalidationsQuotas on key groupsQuotas on WebSocket connectionsQuotas on field-level encryptionQuotas on cookies (legacy cache settings)Quotas on query strings (legacy cache settings)Quotas on headersRelated information
+General quotasGeneral quotas on distributionsGeneral quotas on policiesQuotas on CloudFront FunctionsQuotas on key value storesQuotas on Lambda@EdgeQuotas on SSL certificatesQuotas on invalidationsQuotas on key groupsQuotas on WebSocket connectionsQuotas on field-level encryptionQuotas on cookies (legacy cache settings)Quotas on query strings (legacy cache settings)Quotas on headersQuotas on multi-tenant distributionsRelated information
@@ -53,0 +54,2 @@ CloudFront is subject to the following quotas.
+  * Quotas on multi-tenant distributions
+
@@ -248,0 +251,15 @@ Maximum length of a `CORS (Access-Control-Allow-Origin)` header value |  1,783 c
+## Quotas on multi-tenant distributions
+
+Entity |  Default quota  
+---|---  
+Maximum number of distribution tenants per AWS account |  10,000 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of multi-tenant distributions per AWS account |  20 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of connection groups per AWS account | 100 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of aliases per distribution tenant | 100 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of parameters per distribution tenant |  5 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of parameters per multi-tenant distribution |  5 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of parameters in a field in a multi-tenant distribution |  2 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+Maximum number of connection groups per Anycast static IP list |  5 [Request a higher quota](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E9944CCE)  
+  
+For more information about multi-tenant distributions, see [Understand how multi-tenant distributions work](./distribution-config-options.html).
+